AI Is a Tool, Not a Decision-Maker

…innovation, accountability and the role of AI in automotive retail

Many dealers don’t realize that artificial intelligence is already embedded in multiple dealership operations. AI systems may be at work in:

CRM led scoring and predictive analytics
Automated chat and customer communication tools
Digital retailing platforms
Credit prequalification systems
Marketing automation and behavioral targeting
Contract review and document processing systems
Fraud detection and identity verification software

AI means faster decisions, improved efficiency, better customer targeting, and increased profitability. For dealers, the benefits are obvious.

Vendors often describe AI-powered tools in terms of these benefits (e.g., efficiency or optimization), rather than by describing the technology (e.g., machine learning or artificial intelligence). But their impact goes beyond productivity; automated systems are shaping decisions that affect customers and their buying experience.

In a regulated industry, innovation cannot operate without governance. Artificial intelligence is a powerful tool, but it can’t make informed decisions – and it certainly doesn’t carry associated liability. Dealership leaders must remember this fundamental truth: the dealership remains responsible for its consumer transaction decisions, even if the decisions are influenced by an algorithm.

The Regulatory Reality

Artificial intelligence doesn’t neutralize compliance obligations – it must operate within them. In fact, if AI processes aren’t monitored, they can lead to inadvertent violations.

AI systems that influence pricing, credit approvals, disclosures or communications intersect directly with regulatory risk. The federal and state regulations that impact dealership operations in which AI plays a role include:

The Equal Credit Opportunity Act (ECOA) and state law equivalents
The Fair Credit Reporting Act (FCRA) and state law equivalents
Unfair or Deceptive Acts or Practices (UDAP) standards and state law equivalents
Gramm-Leach-Bliley Safeguards Rule requirements
State privacy, artificial intelligence, and data protection laws.

An algorithm doesn’t eliminate disparate impact concerns under ECOA.It doesn’trelieve adealership of itsobligationsundertheFCRA toprovide an adverse action notice.It doesn’t shield a dealership fromUDAP claims if automated communications are misleading orincomplete.

If an AI model produces a discriminatory outcome, regulators won’t pursue the software. They’ll pursue the business that implemented it. The question is not whether AI is allowed. The question is whether it is monitored.

ADCO suggests applying the Four Compliance Decision Ds to every AI-inﬂuenced decision:

Decisions must be fair.
Decisions must be transparent.
Decisions must be documented.
Decisions must be defensible.

The Illusion of Objectivity

One of the most common misconceptions about artiﬁcial

intelligence is that it’s inherently neutral. Algorithms are trained on historical data. If historical data reﬂects bias, inconsistency or ﬂawed practices, the model may replicate or amplify those patterns.

For example:

If past lending patterns reﬂect disparities based on race or ethnicity, socioeconomic status such as income or education, gender, sexual orientation, disability, or geographic location such as rural or urban, an AI-driven credit recommendation tool may unintentionally perpetuate these disparities.
If marketing data reﬂects uneven targeting, automated advertising systems may reinforce those same demographic or disparate target
If customer communications are automated without appropriate oversight, required disclosures may be unclear or incomplete, creating regulatory
At the same time, impersonal or inaccurate messaging can diminish the customer experience, damage trust and cost the dealership a

Artiﬁcial intelligence learns from patterns. It doesn’t interpret ethics. Human oversight remains essential.

The Explainability Problem

Another challenge with AI systems is explainability. Dealerships need to understand and be able to explain where AI is being used and how it is being monitored.

What happens if a decision is generated by a complex machine learning model?

Can the dealership explain:

What variables inﬂuenced the outcome?
Whether the model was tested for bias?
Whether outputs are monitored regularly?
Who’s responsible for reviewing performance?

If the answer is unclear, risk increases. Dealerships should never implement a tool that produces results they can’t explain.

Vendor Oversight Now Includes AI Oversight

Many AI systems are deployed through third-party vendors. That doesn’t reduce the dealer’s liability.

Under the Safeguards Rule, ﬁnancial institutions — including dealerships that originate retail installment sales contracts — must oversee service providers and ensure appropriate protections are in place to secure customer information. This includes conducting timely written risk assessments and monitoring to identify vendor AI risks, along with implementing a written plan and training to mitigate potential risks.

AI tools provided by vendors that process consumer data, evaluate creditworthiness, or automate communication fall squarely within vendor management responsibilities. Dealerships should be asking vendors:

What data was used to train the model?
How frequently is the model reviewed and updated?
Has the model been tested for bias?
Does the model provide a rationale or explanation for its output?
What human oversight is built into the system?
How is consumer data protected?
What types of customer experience are provided by service providers?

If these questions are not being asked – or there are insufficient knowledge and experience to evaluate the responses – compliance holes and risk exist. While the answers to these questions provide a foundation for compliance, a dealer must continue to monitor the tool to ensure that any identiﬁed risks remain controlled.

The Governance Gap in Automotive Retail

Though AI processes are built into many systems in use in the industry, formal AI governance policies are rare in dealership environments.

To comply with current consumer ﬁnancial regulations, dealerships need, at a minimum:

A written Information Security Program (ISP)
A Qualiﬁed Individual (QI) to oversee, implement and enforce the ISP
A Red Flags Identity Theft Prevention Program
Comprehensive compliance policies addressing federal regulations and enforcement expectations
Documented vendor due diligence and oversight procedures
Ongoing compliance training for employees, management and executive

These foundational elements are no longer optional – they represent the baseline structure of a responsible, defensible dealership compliance program.

Few dealers, however, have implemented:

An Artiﬁcial Intelligence Use (or Governance) Policy
Deﬁned AI oversight roles
AI-speciﬁc risk assessment criteria
Model monitoring procedures
Employee training on responsible AI

The next evolution is clear: artiﬁcial intelligence governance integrated into the dealership’s existing regulatory framework. For AI to remain a strong tool in the dealership, it must be implemented strategically, not just operationally.

AI as a Compliance Booster

Artiﬁcial intelligence is not inconsistent with compliance. When properly governed, it can strengthen dealership compliance across operations.

AI tools can help compliance professionals:

Detect irregular transaction patterns
Flag missing documentation
Identify potential policy violations
Monitor communication consistency
Support internal audit processes
Enhance training personalization
Identity fraud indicia
Sort and categorize data, such as customer satisfaction reports or complaints

The algorithm doesn’t carry the liability; the dealership does.

Practical Steps for Dealership Leaders

Artiﬁcial intelligence governance doesn’t require as much technical expertise as it does leadership clarity. Here are ﬁve practical steps dealerships can implement now:

1. Inventory AI in Your Environment

Identify which vendor tools rely on machine learning or automated decision-making. Many platforms incorporate AI features without prominently labeling them. This may require compliance professionals to ask questions about whether tools incorporate these features. Understanding where AI is operating is the ﬁrst step toward oversight.

2. Update Vendor Due Diligence

Add AI-related questions, such as the ones above, to your vendor management process. Vendor contracts should reﬂect accountability and performance expectations. This includes provisions related to data security, ownership, and retention period requirements.

3. Assign Oversight Responsibility

AI governance should not be ambiguous. Determine who is responsible for:

Monitoring AI outputs
Reviewing performance
Escalating concerns
Reporting ﬁndings to

This task will likely involve collaboration between compliance, IT, and executive leadership. Clear responsibility prevents diffuse accountability.

4. Include AI in the Risk Assessment

If AI inﬂuences consumer transactions or processes consumer data, it should be included in:

Written risk assessments
Safeguards Rule reporting
Dealer principal, board or executive updates

Risk evolves with technology – governance must evolve accordingly.

5. Train Employees

AI literacy is becoming part of compliance literacy. Employees should understand:

What AI tools are being used
What they can and cannot rely on
When human judgment is required (along with accountability)
How to escalate anomalies and red ﬂags
Who should receive reports of potential abuse

Automation does not replace professional responsibility.

Leadership, Ethics and the Human Element

Artiﬁcial intelligence will continue to reshape automotive retail. Efficiency will improve. Data analysis will deepen. And though customer interactions may become increasingly automated, remember that:

Leadership cannot be
Ethics cannot be
Judgment cannot be

The auto industry has always relied on relationships — between dealers and customers, managers and teams, compliance officers and executive leadership. AI may assist those relationships, but it cannot replace the accountability that deﬁnes them.

Artiﬁcial intelligence is a powerful, scalable and transformative tool. But it must remain just that – a tool. When leadership governs innovation, technology becomes an asset. When innovation operates without oversight, risk expands quickly and quietly.

The future of AI in the auto industry will not be deﬁned by how advanced the technology becomes. It will be deﬁned by how responsibly it is implemented.

Technology evolves. Accountability remains.

Linda J. Robertson, SPHR, DCOP
Founder, Executive Director ADCO AFIP/ADCO

Linda J. Robertson is the Executive Director and founder of the Association of Dealership Compliance Officers (ADCO). She develops compliance education, certiﬁcation programs, and risk-management strategies to help dealerships strengthen regulatory compliance, protect consumer information, and foster ethical accountability. AFIP and ADCO are now one compliance company. Linda can be contacted at linda.robertson@adcocommunity.com

Disclaimer:

The information provided in this article is for educational and informational purposes only and should not be construed as legal advice. Readers should consult qualiﬁed legal counsel or compliance professionals regarding speciﬁc regulatory requirements or legal obligations applicable to their organization or jurisdiction.

This material may not be reproduced, distributed, or transmitted in any form or by any means without prior written permission, except for brief quotations used for educational or review purposes with proper attribution.