Question 1

Does the FTC Safeguards Rule apply to my dealership?

Accepted Answer

Yes, if your dealership arranges financing or leasing for customers — which puts it in the FTC's definition of a 'financial institution.' There is no size exemption. Enforcement of the expanded Rule began in June 2024, and it requires a written information security program (WISP) covering nine specific elements.

Question 2

What are the nine required WISP elements?

Accepted Answer

A designated Qualified Individual, a written risk assessment, access controls, a data inventory, encryption of customer information, secure development/application security, multi-factor authentication, secure disposal, and ongoing change management, monitoring, staff training, and incident response with periodic reporting to leadership. This check maps to those elements.

Question 3

Is this check free?

Accepted Answer

Yes — it's completely free with no signup. It's a self-assessment of your own answers against the nine WISP elements; it does not test or access your systems and is general information, not legal advice.

Is your dealership FTC Safeguards-ready?

Have you designated a Qualified Individual accountable for your information security program?