Listen

Description

Tom Kline from Better Vantage Point & I've been speaking about GLBA for bit. Last week I dove into the Facts Not Feelings archives where Chris Tragesz, a cyber security forensics specialist, sat down with me at the first of the year in “What’s the Biggest Risk?” Following up from “We're Gonna Need A Bigger Megaphone,” Tom & I are diving into GLBA & ripping off the Bandaid. What happens when you rip off the Bandaid? It stings at first. The pain's instantaneous, but gets better a lot quicker than a slow painful death!

What makes this episode different? How can we bring more value? Tom Kline! Tom recently gave a GLBA presentation to the NIADA National Policy Conference. He has 30 years of dealership ownership experience. He now excels in dealership dispute, compliance, risk mitigation, & consulting with his company Better Vantage Point. Next, simplify the talking points. A lot of acronyms & scary terms are used. We want to make this easy, breezy, Cover Girl!

Gramm-Leach-Bliley Act (GLBA): https://bit.ly/3C8qk30

The Privacy of Consumer Financial Information Rule of the GLBA: https://bit.ly/3M269bw

FTC's Privacy Rule & Auto Dealer FAQ: https://bit.ly/3dXETyB

Follow Tom: https://qrco.de/bdN0mC

Let BZ Consultants Inspect What Should Be Expected: https://qrco.de/bcqqFo

Follow, subscribe, rate, & never miss a show!

Chapters

0:00 Start

2:24 GLBA: What? Why? How do ADF/XML forms fit into the Gramm-Leach-Bliley Act?

3:58 Gramm-Leach-Bliley Act history. When's the deadline for dealers?

4:32 What's the first, biggest, & most complicated component of the GLBA in Tom’s mind? 

6:12 Quick ADF/XML leads tutorial:

7:32 Do you know that the definition of PII (Personal Identified Information) is changing?

8:57 To reiterate the last few minutes, there is no one solution that can make you 100% GLBA compliant.

11:07 What's “First Party Data”?

12:14 What's a Compliance Management System (CMS)? Do dealerships need one?

15:15 What are the penalties for violating GLBA? GLBA fines?

16:25 What are the main bullet points of GLBA and FTC Privacy Rules that Dealers should be implementing right now? #1 Securing Data #2 MFA: What is MFA (Multi-Factor Authentication)? Which product does Tom recommend? #3 Education: Did you know that you need to train all of your employees? Are you having all employees sign a policy?

19:40 Dealers can use GLBA software to handle about 30% of the heavy lifting when managing vendors.

21:35 Phishing Tests: Will this truly be implemented in house? It'll take a massive culture shift in some stores. 

23:46 Unless you have an audit function behind your compliance program you don’t have a compliance program!

24:51 How much insurance do I need? What's Risk Appetite?

31:02 Are Reputation Management companies sufficient?

39:52 Dealers need to audit their websites to ensure compliance with advertising laws. 

44:43 Lightning Round

#FactsNotFeelings #MovingAutomotiveForward #GLBA #GrammLeachBlileyAct #GLBASafeguardsRule #FTC #TomKline #BetterVantagePoint #ADF #XML #Podcast #Automotive #CarConsultant #AutomotiveConsultant #CarDealership #WomenInAutomotive #WomenInBusiness