Two years of CARS Act records — what has to be kept, and where the archive usually breaks
Of everything the CARS Act asks of a California dealership, recordkeeping is the requirement most likely to be met on paper and missed in practice. The rule itself is short. The work is in the fact that the records it names are produced by five different systems, three of which nobody currently thinks of as a compliance system at all.
It is two years, not four
The retention period is two years from creation. A four-year figure circulates in vendor material and in at least one widely shared readiness checklist; it is not what the statute says. The distinction matters in both directions. A store that plans for four years buys storage and process it does not need. A store that inherited the four-year number from a vendor and then quietly trimmed the budget may end up with neither figure properly implemented.
Records may be kept “in any legible form,” so electronic retention is expressly fine. There is no requirement to keep paper, and no requirement to keep records in any particular system.
The five categories
The statute names five kinds of record. Read them as five separate archives, because in most stores that is exactly what they are:
- Records showing that communications and advertisements of total price complied — expressly including internet listings displaying total price, features or financing terms disseminated by the dealer.
- Copies of all purchase orders and financing and lease documents.
- Records showing that the add-ons in a consumer’s contract complied, including service contracts and GAP agreements with proof of payment.
- Copies of all cancellation requests and proof of refunds.
- Copies of all written complaints from buyers or lessees.
Where it breaks
Categories two and four are usually fine. The deal jacket already exists, and a cancellation is a discrete event with paperwork attached to it. The other three are where readiness work actually goes.
Internet listings
A listing is a communication of total price, and the statute names internet listings the dealer disseminated. That means the evidence to be retained is not the current state of the listing but what it said on a given day — which no inventory system stores by default, because a listing is a live record that gets overwritten every time price or status changes. The practical answer is a periodic snapshot of the syndicated feed, kept as a dated artifact. Feed partners are a further complication: the statute does not name third-party platforms, and how responsibility falls when a partner alters or stales a listing is genuinely unresolved. Snapshotting what you sent is the part you control.
First written communications
Total price has to appear in the first written communication that references a specific vehicle or any monetary amount or financing term — and a copy has to be retained for two years and provided to the customer on written request. That single sentence is what makes a texting habit into a retention problem. A first response sent from a salesperson’s personal cell is a record the dealership owes and cannot produce. So is a reply typed into a marketplace’s own messaging tool that the store does not archive.
The fix is a routing decision more than a technology one: first responses go through a logged system, and the logged system retains for two years. Everything else follows from that.
Proof that add-ons were paid for
The add-on category asks for proof of payment, and there is a related timing rule: the third party meant to provide the benefit generally has to be paid within 10 days of the buyer signing, unless an agreement provides for later payment and the buyer’s coverage is not affected by the delay. Both halves of that exception have to hold.
That is an accounts-payable control, and it belongs to the office rather than to the desk. The retention question is the one that gets missed: remittance has to be evidenced per deal, not per month. A lump payment to a service-contract provider covering thirty deals is a bank record, not proof that a particular buyer’s coverage was funded.
Failing to keep the records is itself a violation
This is the sentence worth carrying into a budget conversation. The recordkeeping duty is independent: a store can write a clean deal, disclose everything correctly, and still be in violation because it cannot produce the file two years later. Most compliance spending is justified by the deals it prevents going wrong. This one is justified by the deals that went right.
Existing retention obligations also continue to apply on top of the CARS Act’s. This is an addition to the record burden, not a replacement of it.
What to build before October 1, 2026
- A dated snapshot of every syndicated listing feed, retained on the same two-year clock as everything else.
- A single logged channel for first responses, with the retention window configured rather than assumed — most CRM archives default to something shorter.
- Per-deal evidence of third-party add-on remittance, and an accounts-payable control that makes the 10-day window a scheduled process rather than a monthly reconciliation.
- A written complaint log that captures complaints arriving by email and web form, not only the ones that reach a manager.
- One owner for the archive. Five systems with five owners is the arrangement that produces a gap nobody is responsible for.
Where this sits in a readiness plan
Retention is usually the second piece of work, after the total-price calculation itself is standardized. It is also the piece with the longest lead time, because it depends on decisions other departments have to make — which system of record, which retention setting, who owns the snapshot. Starting it late is what turns it into a scramble.
We build this as part of CARS Act readiness engagements: the retention architecture, the control points that feed it, and the handoff notes that let the store run it without us. If you want to know where your archive stands today, get in touch — or read the readiness overview first.
A note on scope
M@B Consulting advises on operations and process. We are not a law firm, and nothing here is legal advice or a legal interpretation of SB 766. For how the statute applies to your specific situation, work with your own counsel or your state association — and bring us in to build the process that makes their guidance operational.