Data Sharing with Dealers and Third-Party Business Partners

What it is

Ford may share your personal information with its dealer network, affiliate companies, and third-party marketing partners, including for co-branded services and joint advertising campaigns.

Why it matters (compliance & governance perspective)

Sharing personal data with dealers and marketing partners means your information may be used for targeted advertising and dealer outreach beyond what you might expect from a direct relationship with Ford.

Consumer impact (what this means for users)

Your contact details, vehicle data, purchase history, and inferred consumer profile may be shared with Ford dealers and third-party marketing partners, which can result in targeted advertising and outreach from parties you did not directly engage with.

What you can do

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the CCPA/CPRA framework, which requires businesses to disclose categories of third parties with whom personal information is shared and to provide opt-out rights for sharing for cross-context behavioral advertising purposes. The FTC Act's prohibition on unfair or deceptive practices applies to representations about data sharing. Depending on the nature of financial data shared, GLBA may be relevant if Ford Credit or financial products are involved. GOVERNANCE EXPOSURE: Medium to High. The broad scope of third parties covered including dealers, affiliates, co-brand partners, and joint marketing entities creates a wide data sharing footprint. CPRA treats sharing for cross-context behavioral advertising as equivalent to sale for opt-out purposes, meaning the opt-out mechanism must be functional and prominently disclosed. JURISDICTION FLAGS: California CPRA creates the highest exposure, requiring a Do Not Sell or Share link and operational opt-out mechanism. Nevada's privacy statute requires opt-out rights for sale of covered information. Emerging state privacy laws in Virginia, Colorado, and Connecticut impose similar sharing disclosure obligations that may apply to Ford's operations in those states. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with dealers and co-brand partners should include data use restrictions, security requirements, and prohibitions on unauthorized further sharing. Legal teams should verify that downstream dealer use of shared consumer data is contractually constrained and does not create liability exposure for Ford under applicable state privacy laws. COMPLIANCE CONSIDERATIONS: Teams should maintain an up-to-date data sharing inventory categorizing each third-party recipient type, the categories of personal information shared, and the stated purpose. Opt-out signals including Global Privacy Control must be honored under CPRA, and the policy's opt-out mechanism should be audited for compliance. Annual reviews of dealer and partner data processing agreements are recommended.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Vehicle Telematics and Driving Behavior Data Collection high
• Sensitive Personal Information Collection Including Biometrics and Precise Geolocation high
• California Consumer Rights Including Opt-Out of Sale and Sharing medium
• Data Retention and Deletion Rights medium
• Use of Cookies and Tracking Technologies for Targeted Advertising medium
• Children's Privacy and Minimum Age Restriction low

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.