Skip to main content
Buy Here Pay Here Compliance:
Your Guide to Best Practices

Choose Your Tickets

Select your tickets below to begin registration.




Dealers Teaching Dealers

Come Back Better.

Operating a Buy Here Pay Here (BHPH) dealership offers a vital service to many customers, but it also means navigating a complex web of federal and state regulations. Staying current with compliance requirements is not just about avoiding fines and legal trouble; it is about building a sustainable, reputable business founded on trust and transparency. A strong compliance framework protects both your dealership and your customers, fostering long-term relationships and a positive reputation in the community. Understanding these best practices is the first step toward creating a robust Compliance Management System (CMS) that supports your operational goals. This knowledge forms the bedrock of successful BHPH operations, turning regulatory obligations into a competitive advantage. By prioritizing compliance, you are investing in the longevity and integrity of your dealership, ensuring you can continue to serve your customers for years to come.

Plan Your Stay

Aria Resort & Casino

Las Vegas, Nevada April 26-28, 2027

Get your travel plans in place for the BHPH United Summit. Reserve your room at Aria Resort and Casino and explore discounted airfare options for your trip to Las Vegas.

Embracing a culture of compliance is a continuous journey, not a final destination. The regulatory landscape is always evolving, which requires ongoing education and adaptation. This guide provides a comprehensive overview of the key areas you must focus on, from federal laws to daily operational procedures. By implementing these strategies, you can significantly mitigate risk, improve efficiency, and build a stronger business. For more in-depth learning, explore our specialized BHPH dealer education programs designed to empower your team with practical, real-world knowledge.

Navigating the Federal Regulatory Landscape

For any BHPH dealership, federal regulations create the primary framework for compliant operations. These laws are enforced by powerful agencies like the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC), and non-compliance can lead to severe penalties. Understanding the purpose and requirements of each major statute is non-negotiable. It is essential to integrate these federal rules into every aspect of your business, from the initial customer interaction to final payment collection. Developing a deep understanding is a cornerstone of effective federal compliance training for dealers.

Truth in Lending Act (TILA) and Regulation Z

The Truth in Lending Act, implemented by Regulation Z, is designed to promote the informed use of consumer credit. For BHPH dealers, this primarily means providing clear, accurate, and conspicuous disclosures about the terms and costs of financing. Your Retail Installment Sales Contract (RISC) must clearly state the Annual Percentage Rate (APR), the finance charge, the amount financed, and the total of payments. Any advertising that includes credit terms must also adhere to strict TILA guidelines to avoid triggering additional disclosure requirements. Proper execution of TILA is a key component of any BHPH finance operations training.

Equal Credit Opportunity Act (ECOA) and Regulation B

The ECOA and its implementing Regulation B prohibit discrimination in any aspect of a credit transaction. As a creditor, you cannot make a financing decision based on race, color, religion, national origin, sex, marital status, age, or because the applicant receives public assistance income. This means your underwriting criteria must be applied consistently to all applicants. Furthermore, ECOA requires you to provide applicants with a notice of action taken (adverse action notice) if you deny credit, outlining the specific reasons for the decision. A well-defined credit policy is your best defense against potential discrimination claims, a topic covered extensively in BHPH credit policy education.

Fair Debt Collection Practices Act (FDCPA)

While the FDCPA primarily applies to third-party debt collectors, its principles are considered the gold standard for all collection activities. Many states have their own laws that mirror FDCPA rules and apply them directly to first-party creditors like BHPH dealers. Adopting FDCPA best practices—such as avoiding harassment, not calling at unreasonable hours, and being truthful in all communications—is a critical risk mitigation strategy. Training your collections team on these ethical standards helps protect your dealership from UDAAP claims and preserves customer relationships. Mastering these techniques is central to our collections best practices resources.

Gramm-Leach-Bliley Act (GLBA)

The GLBA requires financial institutions, including BHPH dealers, to explain their information-sharing practices to their customers and to safeguard sensitive data. This law has two main components: the Privacy Rule and the Safeguards Rule. The Privacy Rule mandates that you provide customers with a privacy notice explaining what nonpublic personal information (NPI) you collect and with whom you share it. The Safeguards Rule requires you to develop, implement, and maintain a comprehensive written information security program to protect that customer data. Protecting customer information is a critical part of your overall risk management strategy.

Unfair, Deceptive, or Abusive Acts or Practices (UDAAP)

UDAAP is a broad standard used by regulators to target practices that may not violate a specific law but are considered harmful to consumers. An act is unfair if it causes or is likely to cause substantial injury that consumers cannot reasonably avoid. A deceptive act involves a representation or omission that is likely to mislead a reasonable consumer. An abusive act takes unreasonable advantage of a consumer's lack of understanding or inability to protect their interests. For BHPH dealers, potential UDAAP risks can arise in advertising, sales tactics, add-on products, and collection practices. Adherence to general dealer compliance best practices is the most effective way to steer clear of UDAAP violations.

State-Level Compliance: A Localized Approach

Beyond the federal framework, every BHPH dealer must be an expert in their state's specific laws. State regulations often govern areas that federal law does not, such as interest rate caps (usury laws), licensing requirements, repossession procedures, and specific disclosures required on financing documents. These laws can vary dramatically from one state to another, making localized expertise essential. For instance, the rules for dealers in Texas are different from those in Florida. We offer targeted resources like Texas dealer education and Florida dealer education to help you master your local requirements.

Implementing Compliance Best Practices in Your Dealership

Having knowledge of the law is only half the battle. The real work lies in translating that knowledge into consistent, everyday procedures. A robust Compliance Management System (CMS) involves creating policies, training staff, and monitoring performance to confirm that your dealership operates within legal and ethical boundaries at all times.

Ongoing Staff Training and Development

Your employees are your first line of defense against compliance violations. A single untrained employee can expose your dealership to significant risk. That is why continuous education is not a luxury—it is a necessity. Every team member, from sales and finance to collections and service, should understand the compliance issues relevant to their role.

  • Implement a formal onboarding program for new hires that covers core compliance principles.
  • Conduct regular, recurring training sessions to address regulatory updates and reinforce existing policies.
  • Use real-world scenarios and role-playing to make training engaging and practical.
  • Document all training activities, including dates, topics, and attendees, to demonstrate your commitment to compliance.

Investing in staff training and development and attending events like dealer workshops provides a significant return by reducing errors and protecting your dealership's assets and reputation.

Audit Preparedness and Risk Management

Do not wait for a regulator to show up at your door to find out if your compliance program has weaknesses. Proactive self-assessment is key to effective risk management. Conducting regular internal audits of your deal files, collection logs, and advertising materials can help you identify and correct potential issues before they become major problems. A well-documented audit trail demonstrates good faith and a serious commitment to compliance. Our specialized audit preparedness training can equip you with the skills to build a resilient and defensible compliance program.

Frequently Asked Questions About BHPH Compliance

What is the most common compliance mistake BHPH dealers make?

One of the most frequent issues is inconsistent application of underwriting standards, which can lead to accusations of discrimination under the Equal Credit Opportunity Act (ECOA). Another common mistake is improper communication during collections, potentially violating FDCPA principles or state laws. Creating and adhering to a written credit policy and providing thorough collections training are crucial preventative measures.

Why is a Compliance Management System (CMS) so important?

A CMS is a systematic approach to managing compliance risk. It provides a formal structure for establishing policies, training employees, monitoring activities, and taking corrective action. Regulators like the CFPB view a well-documented and functioning CMS as a strong indicator of a dealership's commitment to consumer protection, which can be a significant mitigating factor during an examination or investigation.

Do federal collection laws like the FDCPA apply to my dealership?

While the FDCPA is written to regulate third-party debt collectors, its standards are widely considered best practices for all creditors. Furthermore, the CFPB can use its UDAAP authority to pursue first-party creditors for collection practices it deems unfair or deceptive, often referencing FDCPA principles. Many states also have their own debt collection laws that apply directly to original creditors, making adherence to these standards a vital part of legal compliance education.

How often should I conduct compliance training with my staff?

Compliance training should not be a one-time event. A best practice is to conduct formal training for all relevant staff at least annually. Additionally, you should provide immediate training whenever a new regulation is enacted, a policy changes, or a compliance issue is identified through an internal audit. Ongoing, bite-sized refreshers during team meetings can also help keep compliance top-of-mind.

What are the key components of the GLBA Safeguards Rule?

The Safeguards Rule requires you to develop a written information security plan that details how your dealership protects nonpublic personal information (NPI). This plan must include designating an employee to coordinate the program, identifying risks to customer data, implementing safeguards (physical, technical, and administrative) to control those risks, overseeing service providers, and regularly evaluating and adjusting your program.