GA Motor Vehicle Franchise Practices Act (8) ‘Secure open application programming interface’ or ‘secure open API’ means an application programming interface that allows an authorized integrator to integrate with a dealer data system remotely and securely. (9) ‘STAR standards’ means standards for the automotive retail industry established by the Standards for Technology in Automotive Retail organization. (10) ‘Third party’ includes service providers, vendors, including dealer data systems vendors and authorized integrators, and any other individual or entity other than a dealer. Such term shall not include any manufacturer; distributor; affiliate of manufacturer or distributor; a third party acting on behalf of or engaged contractually or by other agreement with a manufacturer or distributor or an affiliate thereof; any governmental entity acting pursuant to federal, state or local law; or any third party acting pursuant to a valid court order. (b) It shall be unlawful for a third party to: (1) Access, share, sell, copy, use or transmit protected dealer data from a dealer data system without the prior express written consent of a dealer: (2) Take any action, by contract, technical means, or otherwise, that would prohibit or limit a dealer’s ability to protect, store, copy, share, or use any protected dealer data, including, but not limited to: (A) Imposing any data access overcharges or other restrictions of any kind on the dealer or any authorized integrator for integration; (B) Prohibiting an authorized integrator or any third party identified by a dealer as an authorized integrator that has satisfied or is compliant with the STAR standards, or a standard compatible with such standards, from performing integration or placing unreasonable restrictions on integration, which shall include, but not be limited to: (i) Unreasonable restrictions on the scope or nature of the data shared with an authorized integrator; (ii) Unreasonable restrictions on the ability of an authorized integrator to write data to a dealer data system; (iii) Unreasonable restrictions or conditions on a third party accessing or sharing protected dealer data or writing data to a dealer data system; and (iv) Requiring unreasonable access to sensitive, competitive, or other confidential business information of a third party as a condition for access to protected dealer data or as a condition to share protected dealer data with an authorized integrator (C) Prohibiting or limiting a dealer’s ability to store, copy, securely share, or use protected dealer data outside the dealer data system in any manner and for any reason; or (D) Permitting access to or accessing protected dealer data without prior express written consent by the dealer. (c) (1) A secure open application programming interface shall: (A) Be made available by a dealer data systems vendor to any authorized integrator upon request by a dealer; (B) Include all relevant endpoints to allow for access to all protected dealer data or to integrate with protected dealer data; and (C) Provide granularity and control necessary for dealers and authorized integrators to integrate the data necessary pursuant to contract terms between the dealer and authorized integrator. (2) For purposes of this Code section, secure open application programming shall not require that an application programming interface be available to the public or at no cost to an authorized integrator, provided that no data access overcharge may be assessed in connection with a secure open API. 62 | 2025 MEMBERSHIP DIRECTORY | 2026 MEMBERSHIP DIRECTORY
RkJQdWJsaXNoZXIy MTg3NDExNQ==