AI tools can help dealership employees write faster, summarize information more concisely and work through everyday tasks more efficiently. AI can also make it remarkably easy to move information outside the dealership’s normal safeguards.
Copy. Paste. Submit.
In a matter of seconds, information that was sitting inside a dealership system may now have been provided to an outside AI platform.
Start with one question: Do your employees know how to use AI without unnecessarily exposing customer information?
An employee does not have to misuse information intentionally to create risk. They may simply be using AI to draft a better email, summarize a customer interaction for CRM notes or organize spreadsheet data more efficiently. Employees can often get the same benefit from AI by using generalized or fictional information in lieu of actual customer information. For dealerships subject to the Federal Trade Commission’s Safeguards Rule, AI use is another reason to reinforce a familiar principle: customer information should be handled deliberately and shared only when there is a legitimate business need.
Start With Approved Tools
Many AI tools are free, available from any browser and require little more than an email address to get started. An employee finds something useful, creates an account and starts using it.
That convenience is part of AI’s appeal. It is also why dealerships should make it easy for employees to know which tools are approved and how they can be used.
Consider an employee who wants help drafting a response to a difficult customer. Instead of copying the customer’s entire email into an AI tool, the employee could describe the situation without identifying the customer and ask an approved tool to help draft the response.
The employee still gets the benefit without unnecessarily sharing the customer’s information.
The FTC has cautioned that people using AI services may reveal sensitive or confidential information, including their own customers’ data. How a provider handles information submitted to its tools therefore matters when a dealership evaluates AI for business use.
The goal is not simply to tell employees which tools are off-limits. Give them approved options and clear guidance for using them.
Think About What Goes In
When people think about AI, they tend to focus on what comes out: the email it drafts, the summary it creates or the analysis it provides.
From a privacy and security perspective, what goes in matters just as much.
A prompt is information being provided to a technology provider. So is a document uploaded for analysis or a transcript submitted for summarization.
Before submitting something, employees should look at the information they are giving the tool and ask whether all of it is actually necessary.
If the goal is to improve a response to a customer, the AI may need the context of the situation, but not the customer’s identity. If the goal is to improve a process, the tool likely does not need the customer information contained in the underlying document.
Making that distinction clear to employees can significantly reduce unnecessary exposure while preserving much of AI’s usefulness.
Use Only What You Need
Removing a customer’s name can be a good start, but it may not be enough.
A phone number, email address, VIN or other information may still identify or relate to a particular customer. Several pieces of information can also become revealing when combined.
Employees should not have to make complicated privacy determinations every time they use AI. A practical default is easier:
Use an approved tool, provide only the information needed for the task, and substitute generic or fictional details when actual information is unnecessary.
A salesperson can improve a follow-up message without including the customer’s contact information. A manager can brainstorm training ideas without employee records. A service employee can simplify a technical explanation without uploading an actual repair order.
AI can still be useful without knowing who the customer is.
Give Employees a Rule They Can Actually Follow
“Use AI responsibly” sounds reasonable, but it is not much of an instruction.
Employees need practical guidance about which tools to use, what information to provide and when to ask for help.
The Safeguards Rule requires covered financial institutions to provide security awareness training and adopt policies and procedures that enable personnel to carry out the information security program. AI use can and should fit within that existing security culture.
Before submitting a prompt, employees can ask three questions:
1. Am I using an approved tool for this task?
Start with the tools and uses the dealership has already evaluated.
2. Am I giving the tool only what it needs?
Remove information that is unnecessary to accomplish the task.
3. If sensitive information is necessary, is this use approved?
When the task genuinely requires sensitive information, confirm that the tool and the specific use are appropriate.
That gives employees a usable decision process instead of a general warning to “be careful with AI.”
Make Good AI Use the Easy Choice
Dealerships do not have to choose between adopting useful technology and protecting customer information.
AI can improve efficiency, communication and everyday workflows. The opportunity is to establish clear boundaries so employees know how to use it well.
Give employees approved tools, practical guidance and someone to ask when they are unsure.
Most employees want to handle customer information appropriately. Good guidance makes that easier while still allowing the dealership to benefit from new technology.
Instead of asking what AI can do with the information, ask what information AI actually needs to do the job.
