After a period of relative quiet following the extended compliance deadline, the Federal Trade Commission (FTC) has spoken clearly: the enhanced Safeguards Rule is not going anywhere. On the anniversary of the high-profile CDK breach — a stark reminder of the risks facing dealerships — the FTC has issued a new FAQ clarifying expectations for auto dealers.

This signals a renewed enforcement posture, and it’s a strong reminder: compliance is not optional.

What the New FTC FAQ Means for Dealers

The updated guidance from the FTC highlights that dealerships remain squarely within the scope of the Rule, and regulators will be expecting full compliance — now.

Key Takeaways:

• Auto dealerships are still considered financial institutions.
  The new FAQ reaffirms this classification and its regulatory implications.
• No more grace period.
  The time for planning has passed. The expectation is complete, demonstrable compliance.
• Substance over checkboxes.
  Written security programs, designated qualified personnel, risk assessments, employee training, and vendor management must be more than documents — they must be lived practices with supporting proof.

How OCD Tech Supports Dealerships

At OCD Tech, we’ve worked with dealerships nationwide to implement practical, customized compliance programs under the Safeguards Rule. Our focus is on creating systems that are both defensible under regulatory scrutiny and sustainable in the long term.

Our newest offering — SecurePath — is built specifically for the dealership environment:

• A centralized dashboard to manage FTC Safeguards Rule compliance
• Vendor oversight tools and documentation tracking
• Dark web monitoring and risk reporting
• Ongoing expert support to keep your program current and defensible

Ready to Take Action?

Whether you’re just getting started or want to ensure your current program meets expectations, we can help.

Book a quick 15-minute call with one of our experts to learn more about how SecurePath can support your dealership.

Or, explore free tools and resources at: https://securepath.ocd-tech.com/resources?utm_source=emailcampaign&utm_medium=email&utm_campaign=june1625ftc&utm_id=June+16+2025+FTC+Safeguards+Update&utm_content=june1625ftc-email

Don’t wait for the FTC to come knocking. The Safeguards Rule is active, and regulators are watching. Let’s get your compliance program in gear — and keep it there.

‍