Friday, 08 September 2017 21:10

CCC Defends Shift to Secure Share, Faces Tough Questions from CIC Task Force

Written by
Dan Risley represented a CIC task force formed to address concerns related to CCC’s “Secure Share.” Dan Risley represented a CIC task force formed to address concerns related to CCC’s “Secure Share.”


This summer, CCC Information Services defended the dramatic changes that the shift to CCC’s “Secure Share” system will bring to the industry, calling it necessary for data security, a step forward for the industry, and reasonably priced.

“We’re a software company that builds software as a business,” CCC’s Mark Fincher said at the Collision Industry Conference (CIC) in Chicago in July, when asked about CCC’s projected profit from the 50-cent-per-work file fee that management system providers and other vendors will pay CCC when they receive a shop’s estimate data through Secure Share. “We think the price is fair and equitable for all the participants.”

Fincher’s presentation in Chicago was noteworthy because CCC wasn’t represented at two previous CIC meetings this year at which a task force was formed to address industry concerns about Secure Share. The new data-exchange system went live this past spring, and as of next April, CCC users will only be able to transfer estimate data to others through Secure Share.

That’s a change from the longstanding current method under which a CCC ONE user can transfer the data from an estimate---to a shop management system, a CSI provider, a rental car company, etc.---using a standardized “Estimate Management Standard (EMS)” file. In many cases, those third-parties have---with a shop’s permission---placed a “data pump” on the shop’s server to automatically pull the EMS files the shop has agreed to share.

CCC’s “Secure Share” changes this arrangement in several key ways. First, it transfers the data using a “Business Message Suite (BMS)” file, largely viewed as a positive change. The industry-developed BMS standard gives users more control over which portions of an estimate are transferred. It can limit a parts vendor’s access, for example, to only the portions of the estimate needed to accurately fill the parts order, rather than also including (as the EMS file does) information about the vehicle owner as well.

But the required use of Secure Share for the data transfer means that by next April, shops will need to ensure any vendors or systems (CCC refers to these as “apps”) with which they share estimate data has completed the CCC approval process to be part of the “Secure Share Network.” Those system providers will then pay the 50-cent toll per work file each time they receive data from the shop.

Fincher acknowledged CCC will recoup its development costs and profit from this arrangement, but declined to provide any of the company’s projections for the revenue Secure Share will generate.

He focused on why CCC sees Secure Share as a necessary improvement for data-sharing within the industry, saying that first and foremost it helps ensure the security of estimate information.

“We know this information is sitting on thousands of shop servers or PCs, [in some cases] unencrypted and accessible to third parties,” Fincher said. “In many cases, as a repairer you had no idea who was accessing that information. You may have known there was a data pump or two data pumps on your system, but you had no visibility to that.”

Instead, keeping this information encrypted “in the cloud” and under CCC’s control, he said, helps ensure only authorized parties have access to it, and the BMS file transfer “gives repair facilities the ability to send just the relevant information” to different apps.

“That app provider does not have the ability to share that information with anyone that they want to,” Fincher also noted. “You retain control of that information as a repairer, and know its only going to be used for the purpose for which you designated.”

If a shop chooses to terminate a relationship with an app provider, Secure Share ensures that a third party will no longer have access to the shop’s estimate data, Fincher said.

“I’ve heard these stories that there was a company you were working with five years ago, but you terminated the relationship and moved on to a different software solution, but meanwhile that [old] data pump is still residing on your server, tracking that data, and you might not have had any idea that it’s pulling it,” Fincher said. “Now you have complete transparency with Secure Share.”

Fincher faced some tough questioning from the CIC task force established in the wake of CCC’s announced plans for Secure Share last fall. That task force developed a position statement that is supportive of the shift to the BMS file transfer standard, but critical of other limits on a shop’s sharing of estimate data.

“Any third party that restricts or prevents industry stakeholders from accessing or using the data generated and permitted by the collision repair facility and industry stakeholders will adversely impact the industry,” the task force position statement reads. “In addition, it will inhibit advancements in technology, restrict competition and adds cost into the marketplace. Technological advances should enable sophisticated, secure and more collaborative data usage, not impede industry progress.”

Previous Page Continue reading »