In the latest episode of Training Camp with Adam Marburger, Jim Ganther—co-founder and CEO of Mosaic Compliance Services—returns to discuss the state-level revival of the FTC’s CARs rule, the legal risks of long-term data storage, the weaponization of AI in compliance, and the dangers of misleading tariff-related advertising. Known as “Mr. Compliance,” Ganther delivers a blunt warning to dealerships dragging their feet on regulatory preparedness.
Ganther explains that although the federal CARs rule, officially called the Vehicle Shopping Rule, was struck down, certain states, including California and Massachusetts, are reviving it at the local level. California’s version is nearly identical to the federal draft and would impose major burdens on dealerships, such as a seven-year requirement to retain evidence of compliance. That provision alone, Ganther warns, flips due process on its head by presuming guilt until innocence is proven.
He takes issue with the California rule’s potential requirement to record and store audio or video of every F&I transaction. This, he says, introduces serious data security concerns. “If I can get two hours of your voice and a really cheap AI application, I can do a deep fake of you that will fake out your mother,” Ganther warns. He adds that the liability for storing this type of sensitive information, especially if compromised, could be catastrophic for dealers.
From a best practices standpoint, Ganther advises dealers to already be storing documentation for “the length of financing plus the statute of limitations.” In some cases, that could mean up to 13 years of data retention. While that’s already extensive, the California CARs rule raises the stakes even further by shifting the focus to proving compliance behavior itself—something far harder to document.
Regarding AI, Ganther says its growing role in verifying documents like proof of income could help validate customer paperwork, but the same technology also presents risks. If recordings of customers and staff are retained for long periods, they could be hijacked for malicious purposes, such as impersonation or fraud.
On the topic of tariffs, Ganther is skeptical about their impact on car prices, pointing out that the Chinese government is heavily subsidizing many Chinese factories to maintain production. He criticizes dealers who falsely advertise that they’re “eating the tariff” or urging buyers to act before a 25% price hike hits. “If you’ve got inventory on your lot today, it is not impacted by the tariffs at all,” he explains. In his view, misleading ads erode consumer trust and could violate compliance rules.
Nevertheless, Ganther calls out the significant portion of the dealer body—up to 3,000 stores, by his estimate—that have taken no action on compliance. His advice is blunt: “Call me, obviously, or call my competitors—call KPA, call ComplyAuto, call somebody.” He underscores that inaction is no longer a safe option.
“You know what? I'm not an expert in selling cars — the dealers are. And the dealers aren't experts in compliance — I am, and so are my competitors.” – Jim Ganther
