The Auto Dealership Compliance Checklist: Labour, CMVR, MISP, DPDP, Fire

Auto dealerships juggle more overlapping compliance regimes than almost any other SME category, because a single dealership operates as a workplace, a vehicle-handling business, an insurance distributor and a data handler all at once.

Key facts at a glance

• A dealership needs a Trade Certificate under CMVR to legally move or test-drive unregistered vehicles on public roads.
• Selling motor insurance requires MISP appointment by an insurer or intermediary under IRDAI guidelines, with records retained for at least 7 years.
• EPF is mandatory once staff crosses 20 employees; ESI at 10 or more employees (Rs 21,000/month wage ceiling).
• A POSH Internal Committee is mandatory once headcount reaches 10 or more employees.
• DPDP Act obligations apply because dealerships collect customer ID, contact and financing data as data fiduciaries.
• Workshop areas need separate fire and hazardous-storage compliance from the showroom, given fuel, lubricants and battery storage on site.

Why dealerships need a single checklist, not five separate ones

Most compliance guidance is written per-domain - a labour law guide, an insurance guide, a data protection guide - which works poorly for a dealership because the same staff, the same premises and the same customer records touch all of them simultaneously. A sales executive is a labour law subject, a potential MISP-trained insurance seller, and a handler of customer personal data, all in one role. Treating these as five unrelated checklists means gaps fall through the cracks between them.

The five compliance areas at a glance

Labour compliance basics for dealerships

Sales, service, back-office and delivery staff all count toward the same headcount thresholds. EPF registration is mandatory once the dealership crosses 20 employees, with the standard 12% employee and 12% employer contribution on wages up to the Rs 15,000/month ceiling. ESI applies from 10 employees onward, on wages up to Rs 21,000/month. A POSH Internal Committee becomes mandatory at the same 10-employee threshold and needs an external member, a written policy, and a functioning complaints process - not just a certificate on file.

CMVR and the Trade Certificate

Dealerships routinely move vehicles that are not yet registered - for delivery, demonstration drives, or transfer between showroom and workshop. Doing this without a valid Trade Certificate under the Central Motor Vehicles Rules is a compliance gap that is easy to overlook because the vehicles never leave dealer custody in the owner's mind, even though they are legally being used on public roads.

MISP: insurance rules for dealers

A dealership cannot simply sell motor insurance alongside a vehicle because it is convenient for the customer. It must be formally appointed as a Motor Insurance Service Provider by an insurer or an insurance intermediary - not both simultaneously - and must follow IRDAI's prescribed code of conduct for MISPs. Records related to policies sold or serviced must be retained for at least 7 years from the policy issuance date or the end of the MISP appointment, whichever is later. This is one of the most commonly missed obligations because it feels like a sales function rather than a compliance one.

DPDP: dealerships are data fiduciaries

Every dealership collects customer ID proof, contact details, and financing or loan information, all of which is personal data under the DPDP Act 2023. Under the DPDP Rules 2025, full substantive obligations around notice, consent, security safeguards and breach reporting become enforceable from 13 May 2027, with penalties reaching up to Rs 250 crore per instance for failing to implement reasonable security safeguards. Dealerships should start building consent and data-handling processes now rather than waiting for the enforcement date.

Fire and premises safety

A dealership's showroom and workshop face different risk profiles. The workshop handles fuel, lubricants, battery storage and electrical equipment, which typically demands stricter fire-safety measures, ventilation and hazardous-material storage controls than the customer-facing showroom floor. Fire NOC and periodic safety audits should treat these as two distinct zones rather than a single premises assessment.

If you are not sure where your dealership stands across labour, CMVR, MISP, DPDP and fire safety, ComplianceCheck's auto dealer assessment gives you a clear picture in a few minutes.

Sources

• Ministry of Road Transport and Highways - morth.nic.in
• Insurance Regulatory and Development Authority of India - irdai.gov.in
• Ministry of Electronics and Information Technology - meity.gov.in
• Employees' Provident Fund Organisation - epfindia.gov.in
• Employees' State Insurance Corporation - esic.gov.in
• Respective state fire and labour department

This guide is general information, not legal advice. Requirements vary by state, sector and headcount - confirm specifics with a compliance professional or the relevant authority.