CARS Rule Compliance for Dealerships: What Changed and What to Do

Bottom Line Up Front

The CARS Rule dealership compliance requirements fundamentally changed how you handle customer data and communications. The FTC’s Combating Auto Retail Scams (CARS) Rule creates strict obligations around lead handling, customer communications, and data security that apply to every franchise and independent dealer in the country.

Ignore this at your peril. Violations carry civil penalties up to $50,000 per incident, and state AGs are actively investigating dealerships for CARS Rule violations. Your DMS vendor’s compliance doesn’t cover you — the liability sits squarely on your dealer license.

The good news? Most of what the CARS Rule requires aligns with smart business practices you should already have in place. The challenge is documenting your processes, training your people, and maintaining consistent execution across sales, F&I, and service.

Regulatory Overview

What Law Applies

The Federal Trade Commission’s CARS Rule creates nationwide standards for automotive retail operations, focusing on consumer protection in sales transactions and data handling. Unlike state-specific regulations that vary by DMV jurisdiction, the CARS Rule applies uniformly across all 50 states.

Enforcement Agency: Primary enforcement sits with the FTC, but state attorneys general have concurrent authority and are actively pursuing violations. Your state dealer association likely issued guidance, but remember — state AG offices are looking for high-visibility enforcement actions.

Who’s Covered: Every entity holding a dealer license, regardless of franchise status, lot size, or sales volume. The rule doesn’t distinguish between rooftops selling 50 units monthly versus 500 units. Independent lots, franchise stores, and dealer groups all face identical obligations.

Key Definitions in Dealer Language

Covered Communications: Any customer interaction involving vehicle pricing, financing terms, trade valuations, or transaction details. This includes everything from your BDC’s initial lead follow-up to F&I menu presentations to service advisor estimates on major repairs.

Customer Data: Personally identifiable information collected during the sales process, including credit applications, insurance information, employment data, and contact details stored in your CRM or DMS.

Material Misrepresentations: False or misleading statements about vehicle condition, pricing, financing availability, or dealership policies that could influence a customer’s purchase decision.

Requirements Breakdown

Documentation and Record Keeping

Your DMS likely captures most required documentation automatically, but gaps exist in areas dealers often overlook. Customer communication logs must include phone calls, texts, emails, and in-person interactions. Your BDC’s call tracking software needs to integrate with your compliance documentation system.

Financial disclosure records extend beyond F&I paperwork. Any discussion of payment terms, trade values, or financing options requires documentation, including preliminary quotes and verbal estimates. Your sales team’s desk logs become compliance documentation under the CARS Rule.

Vehicle condition disclosures must be comprehensive and verifiable. Your recon records, inspection reports, and any known defects need clear documentation trails. This applies to both used inventory and new vehicles with transport damage or previous retail delivery attempts.

Employee Training Requirements

The CARS Rule mandates ongoing compliance training for all customer-facing employees. Your current F&I training probably covers disclosure requirements, but you need to expand this to sales consultants, BDC staff, and service advisors.

Training cadence should be quarterly at minimum, with documentation of attendance and comprehension testing. Your HR file needs to include compliance training records for each employee handling customer transactions.

Role-specific requirements vary significantly. Your F&I managers need deep training on disclosure timing and documentation. Sales consultants need clear guidelines on pricing representations and vehicle condition statements. BDC staff need protocols for lead handling and customer data management.

Disclosure and Forms Requirements

Standard dealership forms require updates to meet CARS Rule disclosure standards. Your buyer’s orders, credit applications, and F&I menus need specific language addressing customer rights and dealership obligations.

Timing requirements are critical and often misunderstood. Key disclosures must be provided before customers commit to purchases, not during contract signing. This affects how your sales process flows and when F&I managers get involved in deals.

Language accessibility provisions require disclosures in customers’ primary languages when practicable. Major metropolitan areas with significant Spanish-speaking populations need bilingual disclosure capabilities.

Compliance Checklist

Immediate Action Items

Audit your current documentation systems. Pull a sample of deals from the past 30 days and verify that customer communication logs, pricing disclosures, and vehicle condition statements meet CARS Rule standards. Identify gaps in your current processes.

Update your forms and contracts. Work with your legal counsel to ensure buyer’s orders, credit applications, and F&I documents include required disclosures. Don’t rely on boilerplate updates from form vendors — your specific business practices may require customized language.

Implement data security protocols. Review how customer information flows through your systems, from initial lead capture through deal completion. Identify any third-party vendors with access to customer data and verify their compliance capabilities.

Policy Development

Create written compliance procedures for each department. Your sales department needs clear guidelines on pricing representations and vehicle disclosures. F&I needs documented procedures for disclosure timing and documentation requirements. Service needs protocols for estimate accuracy and customer communication.

Establish a compliance audit schedule. Monthly reviews of randomly selected customer files should become standard operating procedure. Designate specific managers responsible for compliance monitoring in each department.

Document vendor compliance requirements. Your third-party F&I providers, extended warranty companies, and lead management vendors need to demonstrate CARS Rule compliance. Include compliance requirements in vendor contracts and service agreements.

Training Implementation

Develop role-specific training modules. Sales consultants need different training than F&I managers. BDC staff have distinct compliance obligations from service advisors. Generic compliance training isn’t sufficient under the CARS Rule.

Create testing and certification processes. Employees should demonstrate comprehension of compliance requirements before handling customers independently. Document training completion and maintain ongoing education records.

Establish accountability measures. Compliance performance should factor into employee evaluations and compensation decisions. Make compliance a measurable part of your management structure.

Common Violations and Penalties

Documentation Failures

The most frequent violations involve inadequate record keeping rather than intentional misrepresentation. Dealers get cited for incomplete customer communication logs, missing disclosure documentation, and inadequate vehicle condition records.

Customer communication gaps typically occur in BDC operations where call logs don’t capture complete interaction details or when sales consultants fail to document verbal pricing discussions. Your phone system’s call recording isn’t sufficient — you need detailed interaction summaries in customer files.

Incomplete vehicle disclosures often involve known mechanical issues or previous damage that wasn’t clearly communicated to customers. Your recon records and inspection reports must align with customer-facing disclosure documentation.

Process Violations

Disclosure timing errors represent a significant violation category. Providing required disclosures during contract signing instead of earlier in the sales process violates CARS Rule requirements. This affects how your sales managers structure deals and when F&I involvement begins.

Data security lapses include inadequate protection of customer information and unauthorized access to personal data. This extends to employee access controls in your DMS and CRM systems.

Penalty Structure

Civil penalties scale based on violation severity and dealer compliance history. First-time violations typically result in consent agreements requiring policy changes and compliance monitoring. Repeat violations or systematic compliance failures carry substantially higher penalties.

State AG enforcement often involves broader investigations of dealership practices beyond CARS Rule compliance. A CARS Rule violation can trigger comprehensive reviews of your advertising practices, financing procedures, and customer complaint handling.

Building a Compliance Culture

Integration with Daily Operations

Effective CARS Rule compliance becomes part of your standard operating procedures rather than a separate compliance burden. Your morning sales meetings should include compliance reminders. Deal desk procedures should incorporate required documentation checks.

Make compliance measurable. Include compliance metrics in department scorecards alongside traditional performance measures. Track documentation completion rates, training compliance, and audit results as operational KPIs.

Designate compliance champions in each department who understand CARS Rule requirements and can provide real-time guidance to frontline staff. These don’t need to be additional hires — identify current supervisors with aptitude for detailed procedures.

Ongoing Monitoring

Monthly compliance audits should review randomly selected customer files for documentation completeness and procedure compliance. Rotate audit responsibilities among management staff to maintain objectivity and identify systemic issues.

Customer feedback analysis can identify potential compliance problems before they become violations. Review customer complaints and survey responses for patterns indicating disclosure or communication issues.

Vendor compliance monitoring requires ongoing attention. Your third-party providers’ compliance failures become your liability under the CARS Rule. Maintain regular communication with vendors about their compliance procedures and any regulatory updates.

Legal Counsel Involvement

Establish clear escalation procedures for potential compliance issues. Your managers need to understand when situations require immediate legal counsel involvement versus internal resolution.

Annual compliance reviews with qualified counsel help identify regulatory changes and assess your current procedures’ effectiveness. Don’t wait for problems to develop before engaging legal resources.

Document legal guidance received regarding CARS Rule interpretation and implementation. Consistent application of legal counsel’s guidance demonstrates good faith compliance efforts.

FAQ

Q: Does the CARS Rule apply to our service department’s customer communications?

A: Yes, service communications involving pricing estimates, warranty coverage, or customer data handling fall under CARS Rule requirements. Your service advisors need compliance training and documentation procedures similar to sales staff.

Q: Are our third-party F&I vendors responsible for their own CARS Rule compliance?

A: While vendors have their own compliance obligations, your dealership remains liable for violations occurring on your premises or involving your customers. Include CARS Rule compliance requirements in vendor contracts and monitor their procedures regularly.

Q: How long do we need to maintain CARS Rule compliance documentation?

A: Maintain all compliance documentation for at least three years after the customer transaction. Some states may require longer retention periods, so check your local requirements and use the longer standard.

Q: Does our existing dealer management system automatically handle CARS Rule compliance?

A: DMS systems provide tools for compliance documentation, but they don’t ensure compliance automatically. You’re responsible for configuring your systems properly, training employees on correct usage, and maintaining consistent documentation practices.

Q: What’s the biggest compliance risk for most dealerships?

A: Inadequate employee training combined with inconsistent documentation practices creates the highest violation risk. Most dealers have good intentions but lack systematic compliance procedures that work consistently across all customer interactions.

Conclusion

CARS Rule dealership compliance doesn’t require revolutionary changes to well-run stores — it demands systematic documentation of good business practices you should already be following. The dealers struggling with compliance typically have broader operational issues around customer communication, employee training, and process consistency.

Focus on building compliance into your existing workflows rather than creating separate compliance procedures that compete with sales activities. Your sales consultants, F&I managers, and service advisors can maintain productivity while meeting CARS Rule requirements through properly designed systems and consistent training.

The enforcement environment makes compliance non-negotiable. State AGs are actively investigating dealerships, and violation penalties justify significant compliance investments. More importantly, CARS Rule compliance aligns with customer service excellence and operational efficiency — the same practices that drive CSI scores and customer retention also support regulatory compliance.

CarDealership.com’s integrated dealer platform helps hundreds of dealerships maintain compliance while growing their business through automated lead follow-up, comprehensive customer communication tracking, and built-in documentation tools designed specifically for automotive retail operations. Our CRM captures the detailed interaction logs required under the CARS Rule while streamlining your sales processes and improving customer engagement across sales and service departments.

—

This article is for informational purposes and does not constitute legal advice. Consult qualified legal counsel for compliance guidance specific to your dealership.