Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

What Counts as Sensitive Data in an Auto Shop?

29 Jul 2026 · 2 min

Watch on YouTube

2:23

In this instructional segment, the presenter explains that the sensitive information auto‑shop staff must protect is classified as MPI (non‑public personal information) under the GLBA. MPI includes any personally identifiable financial data a customer provides, that results from a transaction, or that is obtained while delivering a financial product or service. The speaker advises treating all customer details on repair orders, deal jackets, parts invoices, and other finance documents as NPI (non‑public personal information) and to lock them down—keep them out of sight, secure them, and never discard them in the trash. Specific examples such as names, addresses, phone numbers, Social Security numbers, and credit scores are highlighted as data that can enable identity theft if exposed. The segment also contains a brief promotional interlude for Atlantic Training’s Wave management platform, which offers HR and soft‑skill courses, onboarding automation, and leadership‑development tracking for free when a training plan is selected.

Chapters

So what exactly is the precious cargo that we're guarding? It's called MPI, which stands for non-public personal information. Under GLBA, MPI generally means personally identifiable financial information that a customer gives us, that results from a transaction, or that we obtain in connection with providing a financial product or service. It's not information that's truly public. But here's the pro tip for the shop floor: treat everything as MPI. For our day-to-day purposes, The safest move is to treat any customer information on our repair and finance documents as if it were NPI. If it's a name, address, phone number, Social Security number, credit score, or other personal details showing up in our repairs, sales, or finance records, lock it down.
Is your employee training scattered across spreadsheets and emails? There's a better way to grow your team. Atlantic Training provides world-class HR and soft skills courses, all hosted inside our Wave management platform. From onboarding automation to tracking leadership development, Wave tracks it all. And you get the software for free when you choose your training plan. Click the link below to build your custom plan now.
In the service department, you'll see this all over. For instance, think about your repair orders, or what we usually call ROs. These work orders follow a car through the shop, and they're absolute gold mines for identity thieves. Then you've got internal wires and deal jackets, those thick folders used by sales and finance that contain deep-dive financial stuff. Even something as simple as a parts invoice or an RO can contain enough personal details to help a scammer. If it's tied to a customer's record, keep it out of sight and out of the trash.