The FTC Safeguards Rule requires financial institutions — a category that explicitly includes auto dealerships that arrange financing — to protect the nonpublic personal information they collect. For the MSPs who serve those dealers, it has quietly become one of the most important topics to understand: dealerships increasingly look to their IT provider to help meet it.
This is a plain-English overview for MSPs. It isn't legal advice, and no single product makes an organization compliant — but knowing the shape of the rule helps you have the right conversations and spot the services your clients need.
What the rule asks for, in broad strokes
At a high level, the Safeguards Rule requires a written information security program with administrative, technical, and physical safeguards appropriate to the size and complexity of the business. In practice that touches things like:
- Access controls— limiting who can reach customer information, and keeping a record of it.
- Encryption— protecting customer information in transit and at rest.
- Monitoring and logging— being able to show who did what with sensitive data.
- Data minimization and disposal— not keeping or exposing information longer or more widely than necessary.
Where document handling fits
Much of the Safeguards conversation focuses on networks and endpoints — but paper is a blind spot. Dealerships print sensitive documents constantly, and the print-scan-email workflow scatters that information across output trays, shared scanners, and personal inboxes. A stack of printed forms sitting in a printer bin is exactly the kind of uncontrolled exposure a safeguards program is meant to prevent.
Moving those documents off paper is a concrete, defensible improvement. When forms are captured off the print stream, encrypted, and delivered to a controlled portal with an audit trail, you replace an uncontrolled physical exposure with a monitored digital flow — supporting access control, encryption, and logging all at once.
Why this matters for the MSP
Helping a dealer improve document handling is a service you can deliver and bill — and one that reinforces your role as their security partner. It's compliance value and recurring revenue in the same motion: a paperless offering that strengthens the safeguards posture while adding a monthly line to the account.
See how secure paperless delivery supports the Safeguards Rule, or learn about PrintSent's security controls.