If an Auto dealership is throwing peoples dates of birth, social security numbers and names in open garbage are they responsible for privacy act violations by not shredding or protecting this personal information?

Probably not. I'm not aware of any law that requires anyone who somehow comes into possession of such information to take any special measures to protect it.