The Safeguards Rule requires financial institutions (defined to include dealers who play any part in financing or leasing) to develop and maintain an “information security program” to protect the confidentiality and integrity of personal consumer information.
Strovink Law, PCBusiness & Automotive Dealership Law