Who owns dealership customer data?
The dealership generates and, in commercial terms, owns its customer, deal, and service records. The practical question is control, not ownership: whoever holds the keys to the system of record decides how easily you can extract, move, and reuse that data. Several states have passed dealer data laws specifically because ownership on paper was not producing access in practice.
Does my DMS vendor own my customer data?
No. Your DMS vendor is a processor of records your dealership created. What vendor agreements have historically controlled is access: which third parties can integrate, at what price, and through which certified program. That is why dealer data statutes focus on access, export, and prohibitions on unauthorized sharing rather than on the word ownership.
What is a dealer data law?
A state statute that limits what a dealership technology vendor may do with protected dealer data and what it must allow the dealer to do. The common provisions are: the dealer may authorize third-party access to its own data, the vendor may not share or sell protected data without consent, the vendor must provide the data in a usable format, and the vendor may not impose unreasonable barriers or fees on authorized integrations.
Which states have dealer data protection laws?
Arizona was first and is widely treated as the template. Several other states have since adopted statutes covering protected dealer data, and the state tracker on this page lists each one with its citation and a link to the official text. Because legislatures amend these provisions, always confirm against the primary source before relying on it.
Can a vendor charge us to access our own data?
In practice many do, through integration, certification, or per-record access fees. Dealer data statutes in several states restrict fees and conditions that function as barriers to authorized access. Regardless of your state, the durable protection is contractual: cap or prohibit access fees in the agreement before you sign it.
Can a vendor use dealership data to train AI models?
Only if your agreement permits it, and most standard vendor agreements are written broadly enough to permit exactly that. If your customer and deal data trains a shared model, the pattern you paid to create becomes available to the store across town. Address it with an explicit clause prohibiting use of your data in shared or multi-tenant model training.
What is protected dealer data?
Statutory language varies, but it generally covers the dealership's customer information, transaction and deal records, service history, employee and financial data, and any data derived from those records inside the vendor's system. Definitions matter: read the definition section of your state statute first, because it determines what the rest of the law protects.
What was the DMS antitrust litigation about?
A long-running set of federal cases alleging that the two largest DMS providers restricted independent data integration and raised the cost of third-party access, harming both integrators and dealerships. The case timeline on this page lists the major filings, decisions, and settlements with links to the underlying documents.
Do dealer data laws apply if my vendor is out of state?
That depends on the statute's scope and on the contract's choice-of-law and venue terms, which is precisely why vendors negotiate those clauses. Statutory protection and contractual protection are not substitutes. Get the terms you need in the agreement so your rights do not depend on which state's law applies.
How do I audit our current data rights?
Inventory every system that holds customer data, request each vendor's data map, test whether you can actually export a complete dataset yourself, and read the assignment, termination, and data-use sections of each agreement. The Data Ownership Scorecard on this site walks a store through that audit in a few minutes.
What should we put in a vendor contract to protect data rights?
At minimum: dealer ownership of dealership data, a standing export right in an open format at no incremental fee, a prohibition on selling or sharing data including de-identified forms, a prohibition on shared-model training, capped or eliminated integration fees, a defined data return and deletion process on termination, named subprocessors, and a breach notification window. The free Dealer Data Addendum on this site contains that language.
Is this legal advice?
No. This page is a research reference for dealership operators, built from public statutes and court filings. Statutes change, and how any provision applies to your agreements is a question for your own counsel.