Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

GLBA and the FTC Safeguards Rule: What Auto Shop Employees Need to Know

27 Jul 2026 · 2 min

Watch on YouTube

2:25

In this presentation, the speaker explains how the Gramm‑Leach‑Bliley Act (GLBA) and the FTC’s Safeguards Rule apply to auto dealerships that engage in financing or long‑term leasing, effectively treating them as financial institutions. The talk breaks down GLBA’s two main components relevant to dealerships: the Privacy Rule, which governs the sharing of customer information, required notices, and opt‑out rights; and the Safeguards Rule, which mandates a comprehensive written information security program covering administrative, technical, and physical safeguards. The speaker emphasizes that compliance is not a single policy but an ongoing system designed to anticipate and mitigate threats before a breach occurs. Failure to implement these safeguards can trigger significant FTC enforcement actions and civil penalties that could jeopardize a dealership’s future. A brief promotional interlude for Atlantic Training’s Wave platform is also included.

Chapters

Okay, first up, let's talk about the alphabet soup of regulations that govern our day-to-day. The big umbrella is the Gramm-Leach-Bliley Act, or GLBA. GLBA, together with the FTC's implementing rules, treats dealerships that are significantly engaged in financing or long-term leasing as financial institutions. That's why we have to follow these requirements. Now, GLBA, it's got two key parts for us. First, the privacy rule. This covers when and how we can share customer info and what notices and opt-out rights we have to give. Then there's the Safeguards Rule. It covers how we actually protect the customer information that we hold.
Is your employee training scattered across spreadsheets and emails? There's a better way to grow your team. Atlantic Training provides world-class HR and soft skills courses, all hosted inside our Wave management platform. From onboarding automation to tracking leadership development, Wave tracks it all. And you get the software for free when you choose your training plan. Click the link below to build your custom plan now.
The FTC's Safeguards Rule is the security rule that implements GLBA. It requires us to develop, implement, and maintain a comprehensive written info security program with administrative, technical, and physical safeguards to protect customer information. It's not just a single policy document. It's a full-on system to keep data safe. The government expects us to protect against anticipated threats or hazards to the security and confidentiality of that info, not just react after a breach. Failing to do that can lead to significant FTC enforcement actions and civil penalties that could seriously damage or even threaten the future of a dealership. Trust me, I've seen the numbers, and they aren't pretty.