| The GLB Act / Safeguarding Law encompasses your entire dealership; retail sales, parts and services, main office, I.T., and DM, and your F&I Department. As you review our web-site and your required obligations regarding the GLB Act and Safeguarding Law's please keep in mind the key to a compliant safeguarding program is that it is ongoing. Auditing documents and training are required for as long as you are in business. Once reviewing your entire responsibilities required by the by the government you will probably feel the same way our clients feel. Leave the safeguarding and compliance to us so you can focus on selling vehicles and making a profit. The Safeguarding Rule THE GOVERNMENTS 5 REQUIREMENTS
- Appoint a compliance officer. This person is the program coordinator. This person oversees your entire program.
- Conduct ongoing risk assessments. All departments of the dealership must be included in the assessment including your dealership computer network system and DMS.
- Identify risks of non-public personal information then design and implement "safeguards" to address the risks of exposure found in your on-going assessments.
- Oversee service providers, especially outside vendors who have access to non-public personal information of a dealership customer or employee.
- Continually train employees, audit all areas of your dealership and revise your information security program.
Safeguarding Solutions
- Dealership Development trains your compliance officer to execute the day to day responsibilities required by the government and customize a calendar specifically for the responsibilities for your dealership.
- A Dealership Development compliance expert will conduct quarterly on-site audits of your dealership. These audits will identify where non-public information (NPI) is at risk. Our experts will than design a customized solution for your dealership and up date your safeguarding manual after each audit.
- Dealership Development offers an organized follow up system to track and archive all of your vendors and service providers policies on how they protect your customers NPI.
- Dealership Development has on-line training and testing for all current and new employees of your dealerships. All training and testing is documents and archived just like the government requires.
In each department of the dealership, Dealership Development inspects every area where Non-Public Personal Information (NPI) may be stored or kept by a dealership employee. The goal is to identify potential infractions of the Gramm-Leach-Bliley Act (GLB). The inspection will be documented in a written Risk Assessment. After completing the Risk Assessment, Dealership Development will create a Policies and Procedures manual for your dealership. Please click on the links below for more information.
|
