Dealer data vendor; authorized integrator; use of protected dealer data; written agreement; termination of agreement.

Sec. 17. (1) A dealer data vendor or an authorized integrator may access, use, store, or share protected dealer data or any other data from a dealer data system only to the extent allowed in a written agreement between the dealer data vendor or authorized integrator and the dealer. (2) An agreement regarding access to, sharing or selling of, copying, using, or transmitting protected dealer data must be terminable not more than 90 days after a dealer data vendor or authorized integrator receives notice from the dealer. (3) On notice of the dealer's intent to terminate the agreement under subsection (2), a dealer data vendor or an authorized integrator shall ensure a secure transition of all protected dealer data to a successor dealer data vendor or authorized integrator by doing both of the following: (a) Providing access to, or an electronic copy of, all protected dealer data and all other data stored in the dealer data system in a commercially reasonable time and format that a successor dealer data vendor or authorized integrator can access and use. (b) Deleting or returning all protected dealer data to the dealer before the termination of the agreement in accordance with any written directions of the dealer. (4) On request by a dealer, a dealer data vendor or an authorized integrator must provide the dealer with a list of any entity the dealer data vendor or authorized integrator is sharing protected dealer data with or any entity to whom the dealer data vendor or authorized integrator has allowed access to protected dealer data. (5) A dealer data vendor or an authorized integrator shall allow a dealer to audit the dealer data vendor's or authorized integrator's access to and use of any protected dealer data.