Ford · Ford Privacy Policy · View original document ↗

Data Sharing with Dealers as Independent Controllers

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Ford changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Ford recorded 4 documented changes in the last 30 days.
Get same-day alerts →
Monitor governance changes for Ford Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The policy states that Ford shares personal information with dealers, who operate as independent businesses with their own privacy policies and may use the data for their own marketing purposes outside of Ford's control.

This analysis describes what Ford's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that dealers are independent data controllers, meaning Ford's privacy policy obligations and consumer rights requests do not automatically bind dealer handling of shared data. Consumers exercising deletion or opt-out rights with Ford may not have those rights automatically honored by dealers who have already received their data.

Recent Activity

This document changed recently

Medium Jul 13, 2026

Ford's updated privacy policy now explicitly states it governs data collection, use, sharing, and protection across all Ford websites, apps, and services, rather than limiting its scope to ford.com and owner.ford.com. This expanded framing indicates the policy applies more broadly to Ford's digital properties and potentially to data collected through connected vehicles and mobile applications. The policy continues to require vehicle owners to inform other drivers and passengers about privacy safeguards and to perform a Master/User Reset before selling or transferring a vehicle.

View change record →
Medium Jun 8, 2026

The updated privacy policy effective January 16, 2026 modifies how Ford will notify you if it makes material changes to this policy. Previously, the language stated Ford would provide notice to enable you to exercise rights regarding your personal information. The revised language now states notice will be provided 'as may be required by law,' meaning Ford's obligation to notify you depends on applicable legal requirements rather than a contractual commitment to advance notice. Additionally, the policy clarifies connected vehicle data sharing icons and descriptions to better explain when Vehicle Data, Vehicle Location, and Driving Data are being transmitted from your vehicle.

View change record →
Medium May 21, 2026

The updated privacy policy establishes a more structured disclosure framework with explicit California privacy rights information and cookie consent management. The revised terms now route California residents to supplemental privacy notices that explain collection practices and provide mechanisms to exercise privacy rights. The removal of specific language describing customer review collection processes and dealership moderation standards means these details are now consolidated into the main privacy notice rather than appearing in review-specific sections. You can access California-specific privacy rights and consent options through the links provided in the updated privacy notice.

View change record →

Consumer impact (what this means for users)

Under this provision, personal information shared with Ford dealers is subject to each dealer's independent privacy policy rather than Ford's policy. Consumers wishing to exercise data rights with respect to dealer-held information would need to contact each dealer independently.

Cross-platform context

See how other platforms handle Data Sharing with Dealers as Independent Controllers and similar clauses.

Compare across platforms →

Monitoring

Ford has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share your personal information with Ford and Lincoln dealers, who may use it for their own marketing and business purposes. Dealers are independent businesses and are not agents of Ford. Dealers have their own privacy policies that govern their use of your information.

Excerpt from Ford's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1. REGULATORY LANDSCAPE: The characterization of dealers as independent controllers is relevant under CCPA/CPRA, which requires businesses to disclose third parties with whom personal information is shared and affects the scope of deletion and opt-out obligations. The FTC Act's prohibition on deceptive practices may apply if the practical scope of dealer data use is not adequately disclosed to consumers. 2. GOVERNANCE EXPOSURE: Medium. The independent controller designation for dealers creates a gap in data rights fulfillment workflows. Under CPRA, Ford may be required to notify dealers of consumer opt-out and deletion requests, but enforcement of those requests against independent dealer systems is not guaranteed by this policy language. 3. JURISDICTION FLAGS: California CPRA imposes obligations on businesses sharing data with third parties acting as independent controllers, including requirements to communicate consumer opt-out signals. Dealers operating in California may independently be subject to CCPA obligations, creating parallel compliance obligations. 4. CONTRACT AND VENDOR IMPLICATIONS: Legal teams should review dealer data agreements to determine whether they include provisions requiring dealers to honor consumer data rights requests forwarded by Ford. The absence of such provisions may create compliance exposure under applicable state privacy frameworks. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether Ford's data subject request workflows include mechanisms to notify and instruct dealers upon receipt of consumer deletion or opt-out requests. Data mapping should document what specific categories of data are shared with dealers and for what purposes.

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Professional · $99/mo Start with Monitor · $29/mo

Applicable agencies

  • FTC
    The FTC has authority over transparency and deceptive practices related to third-party data sharing disclosures by commercial entities.
    File a complaint →
  • State AG
    State attorneys general enforce consumer privacy rights including the adequacy of third-party data sharing disclosures under applicable state privacy statutes.
    File a complaint →

Provision details

Document information
Document
Ford Privacy Policy
Entity
Ford
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-016035
Document ID
CA-D-00613
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
74cdb72670ae84a32d01642c8710ffdf467572597c3d9dfd0be35b506f943c17
Analysis generated
July 9, 2026 09:24 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Ford
Document: Ford Privacy Policy
Record ID: CA-P-016035
Captured: 2026-07-09 09:24:34 UTC
SHA-256: 74cdb72670ae84a3…
URL: https://conductatlas.com/platform/ford/ford-privacy-policy/provision/CA-P-016035/data-sharing-with-dealers-as-independent-controllers/
Accessed: July 23, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Professional · $99/mo Start with Monitor · $29/mo

Frequently Asked Questions

What does Ford's Data Sharing with Dealers as Independent Controllers clause do?

This provision establishes that dealers are independent data controllers, meaning Ford's privacy policy obligations and consumer rights requests do not automatically bind dealer handling of shared data. Consumers exercising deletion or opt-out rights with Ford may not have those rights automatically honored by dealers who have already received their data.

How does this clause affect you?

Under this provision, personal information shared with Ford dealers is subject to each dealer's independent privacy policy rather than Ford's policy. Consumers wishing to exercise data rights with respect to dealer-held information would need to contact each dealer independently.

Is ConductAtlas affiliated with Ford?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ford.