Vendor Risk: The Safeguards Gap Most Dealers Miss

Webinar On-Demand

Your DMS provider, your CRM, the agency running your digital ads, the F&I menu tool. Every one of them touches customer data, and under the FTC Safeguards Rule, how you oversee them is your responsibility, not theirs.

Join KPA Compliance Weekly co-hosts Adam Crowell and Josh Koronich with Carolyn Morris, Consultant at KPA, for a practical look at vendor management. Carolyn covers how to assess a vendor before you sign, what your contracts need to say, and how to keep tabs on vendors after they’re onboarded, so a breach on their end doesn’t turn into a regulatory problem on yours.

What you’ll walk away with:

• Where to start: How to assess vendor risk and build a program you can actually keep up with, from first review through ongoing oversight.

• What the rules require: What the FTC Safeguards Rule and state privacy laws expect when you share customer data with third parties.

• What your contracts need: The clauses in a Data Protection Agreement that protect your store if a vendor slips.

Originally recorded October 29, 2026