Tipping Point for the Car Rental Industry

Tipping Point for the Car Rental Industry

The COVID-19 epidemic has forced the car rental industry into rethinking its value proposition. While it once positioned itself as an ancillary service to the airline industry, generating the bulk of its income through airport locations, a collapse in global airline passenger numbers over the past year may have sped up a process already underway: Far from occupying a segment in the travel industry, car rental companies are now one corner of the Cars as a Service industry.

Cars as a Service is a term used to cover an ecosphere that includes everything from ride hailing to car sharing. The companies that dominate this ecosphere, such as Uber and Turo, are defined by their data rather than their fleet. Players in the car rental industry - those that remain after the carnage inflicted by the pandemic - are facing up to the reality that their competitors are more likely to be technology upstarts than legacy providers.

The case of Uber is illustrative. In 2020 alone, its app was downloaded 95 million times. The app now includes options to order food, send packages, or transport freight. Car rental firms must consider the addition of a car rental service to Uber and other competing platforms as more a case of when rather than if. Car rental firms are gearing up for the challenge through increased technology usage, bringing with it a whole new set of issues to consider.

The Post-COVID 19 Paradigm
The COVID-19 pandemic has created upheaval in most industries, and the car rental industry has been no exception. A series of lockdowns and travel restrictions over the past 18 months forced almost everybody in the industry to scale back by dramatically cutting fleet sizes. In fact, more than 30% of the industry’s vehicles from 2019 have been shed - taking 770,000 car rental firms’ cars off the market.

Now that countries are beginning to reopen, and travel restrictions are being eased, the offshoot is that there aren’t enough cars in the fleet to satisfy consumer demand. As the car rental companies that survived the pandemic - because not all of them did - turn to manufacturers for new models, something else has arrived to compound the issue further: a semiconductor chip shortage, slowing down auto manufacturers’ production lines.

This new paradigm has forced car rental firms to cooperate more with third party aggregator companies who can provide the rental firms with some slack when fleet numbers are low. These aggregators leverage the data accumulated by car rental firms for their own APIs. These APIs often feature little or no data protection. A duplication of the data that a car rental firm is responsible for could therefore amount to a multiplication of its risks.

Data-driven Competition
This is just one data risk, however. Ride hailing firms like Uber now oversee a global fleet of more than 18 million vehicles and this number is expected to rise to 35 million by 2025. These figures dwarf those of the world’s largest car rental firms. But arguably even more importantly, they’re generating an unprecedented amount of data on how everyone gets around. These companies already know better than you when you’ll travel in the next month and where you’ll go.

Car rental firms simply cannot compete with data on this scale, so will have to be creative if their proposition is to remain competitive. This begins with ensuring their fleets are connected. Avis Budget Group had over 200,000 connected vehicles in a total fleet of over 600,000 at the end of 2019. The company reported that this translated into operational efficiencies such as lower maintenance costs, better customer service, and enhanced predictive ability.

These data will be complemented by mountains of personalized customer data generated by mobile apps. Companies like Avis Budget Group now offer contactless, self-service car rental services through APIs as standard. And although these apps have allowed these companies to significantly improve their value proposition, they also create a whole new set of challenges - specifically in ensuring their APIs are secure.

A rule of thumb here is that the more connected companies and their customers become, the bigger the data security risk. It is not unfeasible for a customer picking up a rental car at an airport to have already provided data for their credit card, insurance, and personal information. These data are transferred between the car rental firm and third parties such as regulatory bodies and insurance providers.

Evolution in the Data Revolution
Approov has first-hand experience of working with car rental firms operating under this new paradigm. Its API Threat Protection enabled Sixt, industry’s leading firms, to gain control over what data they share with aggregators and at what level. This allowed Sixt to limit its data risks with additional layers of security, even as the number of end users was increasing. Thanks to Approov, the company’s data began to work for it rather than against it.

For Approov, the Sixt project yielded valuable insights into the challenges that the car rental industry is undergoing. They face what amounts to a data conundrum: On one hand, to remain relevant in the growing field of mobility providers, these companies have to allow API requests. On the other, the car rental companies have sole responsibility for the data, and it is no exaggeration to say that their whole business model depends on them keeping it secure.

Car rental firms now need to manage their data as much as their fleet. As the business environment returns to something approaching normality post- Covid-19, their reduced fleets will mean that a larger proportion of their vehicles than ever will be fully connected. Post-pandemic, they will also find that their customers are even more mobile-centric than before.


  • Live From ISC West: Day 2 Recap

    If it’s even possible, Day 2 of ISC West in Las Vegas, Nevada, was even busier than the first. Remember to keep tabs on our Live From ISC West page for news and updates from the show floor at the Venetian, because there’s more news coming out than anyone could be expected to keep track of. Our Live From sponsors—NAPCO Security, Alibi Security, Vistacom, RGB Spectrum, and DoorKing—kept the momentum from Day 1 going with packed booths, happy hours, giveaways, product demonstrations, and more. Read Now

    • Industry Events
    • ISC West
  • Visiting Sin City

    I’m a recovering alcoholic, ten years sober this June. I almost wrote “recovered alcoholic,” because it’s a problem I’ve long since put to bed in every practical sense. But anyone who’s dealt with addiction knows that that part of your brain never goes away. You just learn to tell the difference between that insidious voice in your head and your actual internal monologue, and you get better at telling the other guy to shut up. Read Now

  • On My Way Out the Door

    To answer that one question I always get, at every booth visit, I have seen amazing product technology, solutions and above all else, the people that make it all work. Read Now

    • Industry Events
    • ISC West
  • Return to Form

    My first security trade show was in 2021. At the time, I was awed by the sheer magnitude of the event and the spectacle of products on display. But this was the first major trade show coming out of the pandemic, and the only commentary I heard was how low the attendance was. Two representatives from one booth even spent the last morning playing catch in the aisle with their giveaway stress balls. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

New Products

  • PDK IO Access Control Software

    PDK.IO Access Control Software

    ProdataKey now allows for "custom fields" within the interface of its pdk.io software. Custom fields increase PDK's solutions' overall functionality by allowing administrators to include a wide range of pertinent data associated with each user. 3

  • Tyco Kantech EntraPass security management software

    Tyco Kantech EntraPass security management software

    Johnson Controls, the global leader in smart, healthy and sustainable buildings, and architect of the Open Blue digital connected platforms, has released the newest version of the Tyco Kantech EntraPass security management software. 3

  • Unique Oversized ID Card Printer

    Unique Oversized ID Card Printer

    Idesco Corp. is announcing its card printer – the XCR100 2.0 printer- that allows customers to personalize oversized ID cards on demand. The printer is ideal for assisting healthcare organizations find the right badging solution. As healthcare facilities continue to combat the spread of COVID-19, issuing oversized ID cards has helped identify staff clearly while adding an extra layer of security. The XCR100 2.0 printer is the only dye-sublimation printer on the market that can personalize CR100 cards (3.88" x 2.63"). The cards that are 42% larger than the standard credit card size. The printer can produce up to 180 full cards per hour in color, and up to 1,400 cards per hour in monochrome. An optional flipper is available to print dual-sided badges in one pass. Contactless encoding comes as an option to help healthcare facilities produce secure access badges on demand and the card printer features a 2-year warranty. 3