Tipping Point for the Car Rental Industry

Tipping Point for the Car Rental Industry

The COVID-19 epidemic has forced the car rental industry into rethinking its value proposition. While it once positioned itself as an ancillary service to the airline industry, generating the bulk of its income through airport locations, a collapse in global airline passenger numbers over the past year may have sped up a process already underway: Far from occupying a segment in the travel industry, car rental companies are now one corner of the Cars as a Service industry.

Cars as a Service is a term used to cover an ecosphere that includes everything from ride hailing to car sharing. The companies that dominate this ecosphere, such as Uber and Turo, are defined by their data rather than their fleet. Players in the car rental industry - those that remain after the carnage inflicted by the pandemic - are facing up to the reality that their competitors are more likely to be technology upstarts than legacy providers.

The case of Uber is illustrative. In 2020 alone, its app was downloaded 95 million times. The app now includes options to order food, send packages, or transport freight. Car rental firms must consider the addition of a car rental service to Uber and other competing platforms as more a case of when rather than if. Car rental firms are gearing up for the challenge through increased technology usage, bringing with it a whole new set of issues to consider.

The Post-COVID 19 Paradigm
The COVID-19 pandemic has created upheaval in most industries, and the car rental industry has been no exception. A series of lockdowns and travel restrictions over the past 18 months forced almost everybody in the industry to scale back by dramatically cutting fleet sizes. In fact, more than 30% of the industry’s vehicles from 2019 have been shed - taking 770,000 car rental firms’ cars off the market.

Now that countries are beginning to reopen, and travel restrictions are being eased, the offshoot is that there aren’t enough cars in the fleet to satisfy consumer demand. As the car rental companies that survived the pandemic - because not all of them did - turn to manufacturers for new models, something else has arrived to compound the issue further: a semiconductor chip shortage, slowing down auto manufacturers’ production lines.

This new paradigm has forced car rental firms to cooperate more with third party aggregator companies who can provide the rental firms with some slack when fleet numbers are low. These aggregators leverage the data accumulated by car rental firms for their own APIs. These APIs often feature little or no data protection. A duplication of the data that a car rental firm is responsible for could therefore amount to a multiplication of its risks.

Data-driven Competition
This is just one data risk, however. Ride hailing firms like Uber now oversee a global fleet of more than 18 million vehicles and this number is expected to rise to 35 million by 2025. These figures dwarf those of the world’s largest car rental firms. But arguably even more importantly, they’re generating an unprecedented amount of data on how everyone gets around. These companies already know better than you when you’ll travel in the next month and where you’ll go.

Car rental firms simply cannot compete with data on this scale, so will have to be creative if their proposition is to remain competitive. This begins with ensuring their fleets are connected. Avis Budget Group had over 200,000 connected vehicles in a total fleet of over 600,000 at the end of 2019. The company reported that this translated into operational efficiencies such as lower maintenance costs, better customer service, and enhanced predictive ability.

These data will be complemented by mountains of personalized customer data generated by mobile apps. Companies like Avis Budget Group now offer contactless, self-service car rental services through APIs as standard. And although these apps have allowed these companies to significantly improve their value proposition, they also create a whole new set of challenges - specifically in ensuring their APIs are secure.

A rule of thumb here is that the more connected companies and their customers become, the bigger the data security risk. It is not unfeasible for a customer picking up a rental car at an airport to have already provided data for their credit card, insurance, and personal information. These data are transferred between the car rental firm and third parties such as regulatory bodies and insurance providers.

Evolution in the Data Revolution
Approov has first-hand experience of working with car rental firms operating under this new paradigm. Its API Threat Protection enabled Sixt, industry’s leading firms, to gain control over what data they share with aggregators and at what level. This allowed Sixt to limit its data risks with additional layers of security, even as the number of end users was increasing. Thanks to Approov, the company’s data began to work for it rather than against it.

For Approov, the Sixt project yielded valuable insights into the challenges that the car rental industry is undergoing. They face what amounts to a data conundrum: On one hand, to remain relevant in the growing field of mobility providers, these companies have to allow API requests. On the other, the car rental companies have sole responsibility for the data, and it is no exaggeration to say that their whole business model depends on them keeping it secure.

Car rental firms now need to manage their data as much as their fleet. As the business environment returns to something approaching normality post- Covid-19, their reduced fleets will mean that a larger proportion of their vehicles than ever will be fully connected. Post-pandemic, they will also find that their customers are even more mobile-centric than before.


  • 12 Commercial Crime Sites to Do Your Research

    12 Commercial Crime Sites to Do Your Research

    Understanding crime statistics in your industry and area is crucial for making important decisions about your security budget. With so much information out there, how can you know which statistics to trust? Read Now

  • Boosting Safety and Efficiency

    Boosting Safety and Efficiency

    In alignment with the state of Mississippi’s mission of “Empowering Mississippi citizens to stay connected and engaged with their government,” Salient's CompleteView VMS is being installed throughout more than 150 state boards, commissions and agencies in order to ensure safety for thousands of constituents who access state services daily. Read Now

  • Live From GSX: Post-Show Review

    Live From GSX: Post-Show Review

    This year’s Live From GSX program was a rousing success! Again, we’d like to thank our partners, and IPVideo, for working with us and letting us broadcast their solutions to the industry. You can follow our Live From GSX 2023 page to keep up with post-show developments and announcements. And if you’re interested in working with us in 2024, please don’t hesitate to ask about our Live From programs for ISC West in March or next year’s GSX. Read Now

    • Industry Events
    • GSX
  • People Say the Funniest Things

    People Say the Funniest Things

    By all accounts, GSX version 2023 was completely successful. Apparently, there were plenty of mix-ups with the airlines and getting aircraft from the East Coast into Big D. I am all ears when I am in a gathering of people. You never know when a nugget of information might flip out. Read Now

    • Industry Events
    • GSX

Featured Cybersecurity


New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening. 3

  • ResponderLink


    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3