View Rule

During the 2018, the Commission expects to initiate periodic review of the Identity Theft Rules. The Rules requires financial institutions and creditors to develop and implement a written identity theft prevention program. By identifying red flags for identity theft in advance, businesses can be better equipped to spot suspicious patterns that may arise -- and take steps to prevent potential problems from escalating into a costly episode of identity theft. Under the Rules, Red Flag Programs must have four parts. First, the Program must include reasonable policies and procedures to identify signs or red flags of identity theft in the day-to-day operations of the business.  Second, the Program must be designed to detect the red flags of identity theft identified by the business. Third, the Program must set out the actions the business will take upon detecting red flags.  Finally, because identity theft is an ever-changing threat, a business must re-evaluate its Program periodically to reflect new risks from this crime.