The Challenge for Auto Dealers
Since California's CARS Act was signed in October 2025, auto retail compliance teams have been grappling with how to meet a two-year retention requirement. Vehicle detail pages (VDPs) often change prices, incentives, and disclosures multiple times daily, making it difficult to capture and retrieve dynamic web content in a way that satisfies legal scrutiny.
The law, effective October 1, 2026, mandates that dealers retain records for two years from creation. This includes advertisements, price communications, contracts, add-on documentation, cancellation records, and complaints. The challenge isn't just understanding what to keep; it's ensuring you can prove compliance when needed.
Accessioning Dynamic VDPs
Do We Need to Archive Every Version?
Yes, if you're advertising to California buyers.
The CARS Act's two-year retention starts when a record is created. A VDP published on October 1, 2026, must be retrievable until September 30, 2028, regardless of whether the car sells or the listing is removed. If a consumer disputes an advertised price or claims a disclosure was missing, you must show what the page displayed when they viewed it. Screenshots alone aren't enough; they miss interactive elements and timestamps.
A defensible record captures the complete page as rendered, includes a verifiable timestamp, and uses a hash value to prove the file hasn't been altered. It should replay the page with all original dropdowns and calculators intact.
Retention Periods for Contracts
Does the CARS Act Change Existing Retention Obligations?
No, it adds to them.
Financed sale contracts must still be retained for seven years under Civil Code §2984.5. The CARS Act introduces a separate two-year requirement for records like advertisements and price communications. Your records control schedule should assign each record type the longest applicable retention period. Contracts get seven years; VDPs and price communications get two years.
Defining 'First Written Price Communication'
What Qualifies?
Any written response to a consumer's inquiry about a vehicle's price.
If a buyer emails or texts asking for a price and you reply in writing, that reply must be retained for two years. This includes informal texts like "I can do $28,500 for the Accord." Your retention system needs to capture these communications as they're created, not reconstruct them later.
Documenting Cancellations
What Records Are Required for a Right to Cancel?
You need the cancellation request, evidence of the refund, and records of any trade-in returned to the buyer. The CARS Act doesn't specify how to document the vehicle's condition at delivery, but this often determines whether the returned vehicle was in the same condition. Keep detailed records to defend against claims of improper fees or unreturned trade-ins.
Consequences of Missing Records
What If We Can't Produce a Record?
You risk significant penalties.
Under California's Unfair Competition Law, a violation of the CARS Act can result in a civil penalty of up to $2,500 per violation. Additional penalties apply if affected buyers are seniors, disabled persons, service members, or veterans. Without records, you can't prove a violation was isolated or quickly corrected, increasing potential penalties.
Effective Web Accessioning
How Do We Archive Web Content Properly?
Use a web Accessioning system that captures pages on a schedule, saves them in a standard archival format, and preserves proof of authenticity.
The WARC format is the standard for web archives. A compliant system captures the full page source and includes all interactive elements. Each capture should be timestamped and assigned a cryptographic hash value to prove it hasn't been modified. Storage on WORM media prevents alterations.
When retrieved, a page should replay with its original dropdown menus, forms, and payment calculators. Some systems use AI to review captured pages against compliance rules, alerting your team to fix errors before they spread.
Next Steps
The CARS Act is codified in California Civil Code §1784.1 et seq. If you're subject to the law, involve counsel now to map your record types to their retention periods and evaluate your current capture and retrieval capabilities. The October 1, 2026, effective date is your deadline to have defensible systems in place, not your deadline to start planning.
For financed sale contracts, review Civil Code §2984.5 to confirm your seven-year retention program covers all required documentation. And if you work with auto lenders in California, expect them to ask for certification that you're retaining SB 766 records for two years; some credit unions have already added that requirement to dealer agreements.
