Compliance With the Red Flags Rules
|
|
- Andrea Cunningham
- 5 years ago
- Views:
Transcription
1 For Audio Participation, Please Call , * * Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321 N. Clark Street, Suite 2800, Chicago, IL Compliance With the Red Flags Rules 12 p.m. 1:30 p.m. Central August 27, 2009 Dan Bachrach Andrew Serwin Douglas Kelly Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321 N. Clark Street, Suite 2800, Chicago, IL
2 Housekeeping Issues Call for technology assistance Dial *0 (star/zero) for audio assistance Ample time for Q & A will be allotted at the end of the formal presentation Pull Down Menu We encourage you to Maximize the PowerPoint to Full Screen Usage: Hit F5 on your keyboard; or Select View from the toolbar menu and click Full Screen To print a copy of this presentation: Click on the printer icon in the lower right hand corner Convert the presentation to PDF and print as usual 3 Today s Presenters Andrew Serwin Foley & Lardner LLP Douglas Kelly Marriott International, Inc. 4 Dan Bachrach Foley & Lardner LLP 2
3 Privacy 5 General Principles: Notice Choice Onward Transfer Access Security Data Integrity Enforcement Privacy 6 Ultimately Four Issues: What information do you collect? What do you do with the information? When can t you disclose it? When must you disclose it? 3
4 Federal Privacy Statutes 7 Children s Online Privacy Protection Act Gramm-Leach-Bliley FCRA/FACTA Right to Financial Privacy Act Electronic Communications Privacy Act Health Insurance Portability and Accountability Act CAN-SPAM and telephone marketing restrictions Common Areas of State Regulation 8 Identity Theft Laws Restrictions on Use of Social Security Numbers Spam Internet Privacy Telephone/Fax Marketing Laws State Wiretapping Laws Computer Crime Laws Notice of Security Breach Laws Medical Privacy Financial Privacy 4
5 What Type of Data Presents Privacy and Security Issues? 9 Confidential Information Intellectual Property Personally Identifiable Information Health Financial Other data that reveals sensitive information about individuals by itself or if combined with other information Trends in Privacy 10 Increasing technology is driving more information sharing, as well as greater restrictions. Free services on the Internet are built upon information sharing and therefore government regulation has been more limited. Health information is receiving more regulatory attention. Government spending will drive EHR and privacy requirements. Greater protections for information that can be used to commit identity theft. 5
6 Why are we here? 11 The FTC continues to be concerned about identity theft, including medical identity theft. Notable Examples: ChoicePoint 12 February 2005 allegation: Identity thieves posed as legitimate customers to access company s extensive consumer profile database FTC reportedly investigated company s compliance with federal law SEC reportedly investigated insider trading and adequacy of disclosures Secret Service, FBI and U.S. Postal Service involved Six class-action lawsuits filed in CA and GA 6
7 Notable Examples: DSW Shoe Warehouse 13 March 2005 Allegation: Data from 1.4 million credit cards used in 108 stores was reportedly stolen between November 2004 and February 2005 Federal authorities, including Secret Service, investigated DSW established special help line for its customers Parent company disclosed the matter in a 10-K/A and 8- K filed in April 2005 Disclosures occurred in the midst of parent s planning for the IPO of DSW Head of FTC, Deborah Platt Majoras, was among affected DSW customers Notable Examples: Heartland 14 Late 2008: 100 million card transactions/month for 175,000 merchants Attack occurred while PCI review under way Heartland uncovered malware (the data-sniffing kind) that allowed thieves to capture credit or debit-card numbers, expiration dates, and in some cases the cardholder s name. 7
8 Scope of Coverage of the Rule 15 Financial Institutions and Creditors that offer or maintain covered accounts. The key concepts for the scope of coverage are what is a: Financial Institution; Creditor; and Covered account. Other Key Concepts 16 The definition of identity theft is also important: The term "identity theft" means a fraud committed or attempted using the identifying information of another person without authority. 8
9 Other Key Concepts 17 The term "identifying information" means any name or number that may be used, alone or in conjunction with any other information, to identify a specific person, including any--(1) Name, social security number, date of birth, official State or government issued driver's license or identification number, alien registration number, government passport number, employer or taxpayer identification number; (2) Unique biometric data, such as fingerprint, voice print, retina or iris image, or other unique physical representation; (3) Unique electronic identification number, address, or routing code; or (4) Telecommunication identifying information or access device. Other Key Concepts 18 Red Flag means a pattern, practice, or specific activity that indicates the possible existence of identity theft. 9
10 Who is covered? 19 Financial Institution is defined in the same way as in 15 U.S.C. 1681a(t). Creditor has the same meaning as in 15 U.S.C. 1681a(r)(5), and includes lenders such as banks, finance companies, automobile dealers, mortgage brokers, utility companies, and telecommunications companies. What is covered? 20 Covered account means: (i) An account that a financial institution or creditor offers or maintains, primarily for personal, family, or household purposes, that involves or is designed to permit multiple payments or transactions, such as a credit card account, mortgage loan, automobile loan, margin account, cell phone account, utility account, checking account, or savings account; and (ii) Any other account that the financial institution or creditor offers or maintains for which there is a reasonably foreseeable risk to customers or to the safety and soundness of the financial institution or creditor from identity theft, including financial, operational, compliance, reputation, or litigation risks. Account means a continuing relationship established by a person with a financial institution or creditor to obtain a product or service for personal, family, household or business purposes. Account includes: (i) An extension of credit, such as the purchase of property or services involving a deferred payment; and (ii) A deposit account. 10
11 What is required? 21 Each Creditor must periodically determine whether it offers or maintains covered accounts. This must include a risk assessment to determine whether it offers or maintains covered accounts taking into consideration: The methods it provides to open its accounts; The methods it provides to access its accounts; and Its previous experiences with identity theft. Written Program 22 Financial Institutions and Creditors that offer or maintain one or more covered accounts must develop and implement a written Identity Theft Prevention Program (Program) that is designed to detect, prevent, and mitigate identity theft. 11
12 What Factors Can be Considered When the Program is Created? 23 The Program must be appropriate to the size and complexity of the Financial Institution or Creditor and the nature and scope of its activities. What Must the Program Include? 24 The Program must include reasonable policies and procedures to: Identify relevant Red Flags for the covered accounts that the Financial Institution or Creditor offers or maintains, and incorporate those Red Flags into its Program; Detect Red Flags that have been incorporated into the Program of the Financial Institution or Creditor; Respond appropriately to any Red Flags that are detected to prevent and mitigate identity theft; and Ensure the Program (including the Red Flags determined to be relevant) is updated periodically, to reflect changes in risks to customers and to the safety and soundness of the financial institution or creditor from identity theft. 12
13 Continued Administration and Necessary Approvals 25 A Creditor must also provide for the continued administration of the Program and must: Obtain approval of the initial written Program from either its board of directors or an appropriate committee of the board of directors; Involve the board of directors, an appropriate committee thereof, or a designated employee at the level of senior management in the oversight, development, implementation and administration of the Program; Train staff, as necessary, to effectively implement the Program; and Exercise appropriate and effective oversight of service provider arrangements. Other Key Elements of the Program 26 The Program must also assist the Creditor in: Identifying Relevant Red Flags; Detecting Red Flags; Preventing and Mitigating Identity Theft; Administering the Program; Complying with Other Applicable Legal Requirements; Addressing Alerts, Notifications or Warnings from a Consumer Reporting Agency; Identifying Suspicious Documents and Suspicious Personal Identifying Information; and Identifying the Unusual Use of, or Suspicious Activity Related to, the Covered Account. 13
14 New Guidance from the FTC 27 There have been several documents released by the FTC that have provided additional guidance, but open questions remain. Effective Date 28 November 1, 2009? 14
15 Potential Litigation 29 Both the American Bar Association, and the American Medical Association, have threatened litigation over the definition of creditor. Creating a Compliance Plan Potentially Relevant Policies 30 Privacy policies Employee policies Business partner policies (e.g., contract policies) Document retention policies (e.g., destruction of records containing sensitive personal information) Incident response policies 15
16 Prevention 31 Technologically Protect your systems Work with (certified) vendors and other parties like Visa Visa s information security standards ISO Information Security Programs Contractually Two key contracts are merchant bank and POS vendor Require certifications as a condition Internally Implement appropriate policies Educate employees about handling inquiries What is reasonable security? 32 Legislative history says there are no specific mandates; no bright lines States there will be compliance uncertainty Goal is to allow industry to exercise its own judgment Reasonable measures must be appropriate to the nature of the information This obligation expressly applies to contracts involving data sharing 16
17 Information Security and Privacy: A Practical Guide to Federal, State and International Law 33 Privacy Takeaways 34 Assess what information is being collected Think through the types of data you are collecting Determine what laws apply to your company based upon the information it collects, where it does business and the identity of its customers 17
18 Privacy Takeaways 35 Make sure that employees understand that they do not have an expectation of privacy in their use of your and electronic systems Consider what security systems you have in place and what securities measures you are requiring third parties to have Consider restrictions upon the use of removable media Make sure your privacy policy makes the necessary disclosures Privacy Takeaways 36 Reserve the right to modify your privacy policy Ensure that employees are aware of your policies Assess whether you have a responsibility to report a data security incident Consider what security systems you have in place and what securities measures you are requiring third parties to have Determine if you are sending or receiving data to countries that have higher privacy and security standards 18
19 37 Questions and Answers Presenter Contacts 38 Andrew Serwin Dan Bachrach Douglas Kelly
20 Thank You 39 A copy of the PowerPoint presentation and a multimedia recording will be available on our website within 24 to 48 hours: We welcome your feedback. Please take a few moments before you leave the web conference today to provide us with your feedback. 20
Identity Theft Prevention Program
Policy Title: Identity Theft Prevention Program Policy Number: PS 992 Purpose of Policy: Applies to: To ensure compliance with federal mandates relating to identity theft. It requires creditors who have
More informationTITLE II ADMINISTRATIVE REGULATIONS IDENTITY THEFT PREVENTION PROGRAM
TITLE II ADMINISTRATIVE REGULATIONS CHAPTER 30 IDENTITY THEFT PREVENTION PROGRAM 30.01 Program The Town of Flower Mound, Texas, as a utility provider ( Utility ), has developed an Identity Theft Prevention
More informationIDENTITY THEFT DETECTION POLICY
IDENTITY THEFT DETECTION POLICY PC 6.9 Date of Last Update: May 05, 2009 Approved By: President's Cabinet Responsible Office: Business and Finance POLICY STATEMENT Grand Valley State University (GVSU)
More informationAttachment to Identity Theft Prevention Service Provider Attestation
Attachment to Identity Theft Prevention Service Provider Attestation Identify Theft Prevention Policy Effective January 1, 2011 Identity Theft is a crime in which an individual wrongfully obtains and uses
More informationNEW FTC RED FLAG REQUIREMENTS AS APPLICABLE TO CREDITORS AND COVERED ACCOUNTS
NLBMDA STAFF ANALYSIS NEW FTC RED FLAG REQUIREMENTS AS APPLICABLE TO CREDITORS AND COVERED ACCOUNTS SUMMARY The new Red Flag rule, finalized in November 2007, goes into effect on November 1, 2008. The
More informationCITY OF ISSAQUAH. Identity Theft Prevention Program
Attachment A CITY OF ISSAQUAH Identity Theft Prevention Program Effective beginning May 1, 2009 Page 1 of 6 I. PROGRAM ADOPTION The City of Issaquah ( Utility ) developed this Identity Theft Prevention
More informationIdentity Theft Prevention: The FTC s Red Flags Rules and Health Care Providers HCCA Physician Practice Compliance Conference October 13, 2009
Identity Theft Prevention: The FTC s Red Flags Rules and Health Care Providers HCCA Physician Practice Compliance Conference October 13, 2009 Rebekah A. Z. Monson Pepper Hamilton LLP 215.981.4031 monsonr@pepperlaw.com
More informationChapter 3. Identifying Red Flags. 3:1 Overview
Chapter 3 Identifying Red Flags 3:1 Overview 3:1.1 Identity Theft 3:1.2 Red Flag 3:2 Conducting an Initial Risk Assessment 3:2.1 Practical Considerations 3:2.2 Risk Factors to Consider 3:2.3 Other Sources
More informationIDENTITY THEFT RED FLAG POLICY/GUIDELINES JULY 2008
IDENTITY THEFT RED FLAG POLICY/GUIDELINES JULY 2008 Introduction: Under the Fair and Accurate Credit Transactions Act (FACT Act), financial institutions (and creditors) that offer or maintain covered accounts
More informationPolson/ Ronan Ambulance Service Identity Theft Prevention Program
Purpose Polson/ Ronan Ambulance is committed to providing all aspects of our service and conducting our business operations in compliance with all applicable laws and regulations. This policy sets forth
More informationIdentity Theft Prevention Program Lake Forest College Revision 1.0
Identity Theft Prevention Program Lake Forest College Revision 1.0 This document supersedes all previous identity theft prevention program documents. Approved and Adopted by: The Board of Directors Date:
More informationEXHIBIT A IDENTITY THEFT PREVENTION PROGRAM
EXHIBIT A IDENTITY THEFT PREVENTION PROGRAM I. ADOPTION Michigan State University Identity Theft Prevention Program The Board of Trustees of Michigan State University adopted this Identity Theft Prevention
More informationMinnesota State Colleges and Universities Identity Theft Prevention Program
Effective 3-18-09 Identity Theft Prevention Program 1 This is the Minnesota State Colleges and Universities Identity Theft Prevention Program, including more detailed guidelines. The initial Program was
More informationIdentity Theft Prevention Program
Identity Theft Prevention Program In December 2008 the VSC Board of Trustees recognized that some activities of the VSC are subject to the provisions of the Fair and Accurate Credit Transactions Act (FACT
More information16 CFR Duties regarding the detection, prevention, and mitigation of identity theft.
16 CFR 681.2 681.2 Duties regarding the detection, prevention, and mitigation of identity theft. (a) Scope. This section applies to financial institutions and creditors that are subject to administrative
More informationFitchburg State College Identity Theft Prevention Program updated 11/17/09
Fitchburg State College Identity Theft Prevention Program updated 11/17/09 Program Adoption Purpose Definitions Fitchburg State College (College) developed this Identity Theft Prevention Program to detect,
More informationIdentity Theft Prevention Program Procedure
Identity Theft Prevention Program Procedure Procedure Number 9.6P Effective Date 6/16/2010 1.0 PURPOSE The college shall operate an Identity Theft Prevention Program (Appendix A) according to the written
More informationNEVADA SYSTEM OF HIGHER EDUCATION PROCEDURES AND GUIDELINES MANUAL CHAPTER 13 IDENTITY THEFT PREVENTION PROGRAM (RED FLAG RULES)
NEVADA SYSTEM OF HIGHER EDUCATION PROCEDURES AND GUIDELINES MANUAL CHAPTER 13 IDENTITY THEFT PREVENTION PROGRAM (RED FLAG RULES) Section 1. NSHE... 2 Section 2. UNR... 4 Section 3. WNC... 8 Chapter 13,
More informationIV:07:11 IDENTITY THEFT PREVENTION POLICY SECTION 1: BACKGROUND
IV:07:11 IDENTITY THEFT PREVENTION POLICY SECTION 1: BACKGROUND The risk to Volunteer State Community College ( College ) its faculty, staff, students and other applicable constituents from data loss and
More informationPOLICY: Identity Theft Red Flag Prevention
POLICY SUBJECT: POLICY: Identity Theft Red Flag Prevention It shall be the policy of the Cooperative to take all reasonable steps to identify, detect, and prevent the theft of its members personal information
More informationWashington Association of Sewer and Water Districts (WASWD) IDENTITY THEFT PREVENTION PROGRAM
IDENTITY THEFT PREVENTION PROGRAM Note: This sample identity theft prevention program is for informational purposes only. It may not be suitable for your district depending on its size, complexity and
More informationDesigning Privacy Policies and Identifying Privacy Risks for Financial Institutions. June 2016
Designing Privacy Policies and Identifying Privacy Risks for Financial Institutions June 2016 Program Overview Regulatory Environment Who Needs a Privacy Program and Common Questions Components of a Comprehensive
More informationInvestor Relations Issues
1 2 Investor Relations Issues February 24, 2010 Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321 N. Clark Street,
More informationAIMS COMMUNITY COLLEGE PROCEDURE IDENTITY THEFT PREVENTION - RED FLAG PROCEDURE
3-950A AIMS COMMUNITY COLLEGE PROCEDURE IDENTITY THEFT PREVENTION - RED FLAG PROCEDURE HISTORY In response to the growing threat of identity theft, the United States Congress passed the Fair and Accurate
More informationUNIVERSITY OF DENVER POLICY MANUAL IDENTITY THEFT PREVENTION
UNIVERSITY OF DENVER POLICY MANUAL IDENTITY THEFT PREVENTION Responsible Department: Provost and Business and Financial Affairs Recommended By: Provost, VC Business and Financial Affairs Approved By: Chancellor
More informationRED FLAG LAW made EASY! HIPAA made EASY. Training, Implementation & Sign-off Sheets
HIPAA made EASY RED FLAG LAW made EASY! Training, Implementation & Sign-off Sheets HIPAA MADE EASY / 2009/2017 All Rights Reserved 104 HIPAA MANUAL TO OMNIBUS RULE STANDARD The RED FLAG LAW is a federally
More information30.17 Identity Theft Protection Policy October 2018
30.17 Identity Theft Protection Policy October 2018 Preamble. The U.S. Congress has provided protection for consumers from identity theft by enacting the Fair and Accurate Credit Transactions Act ( FACTA
More informationMiddlebury Institute of International Studies Identity Theft Prevention Program
Middlebury Institute of International Studies Identity Theft Prevention Program I. PROGRAM ADOPTION Middlebury Institute of International Studies, hereafter referred to as the Institute, has developed
More informationIllinois Eastern Community Colleges. Frontier Community College Lincoln Trail College Olney Central College Wabash Valley College
Illinois Eastern Community Colleges Frontier Community College Lincoln Trail College Olney Central College Wabash Valley College Identity Theft Prevention Program Approved by the Cabinet: February 4, 2015
More information(2) Detect red flags that have been incorporated into the program;
3341-6-56 Theft Prevention Policy (Red Flag Rules). Applicability All University units Responsible Unit Policy Administrator The Vice President for Finance and Administration and Chief Financial Officer
More informationMiddlebury College Identity Theft Prevention Program
Middlebury College Identity Theft Prevention Program I. PROGRAM ADOPTION Middlebury College has developed this Identity Theft Prevention Program ("Program") pursuant to the Federal Trade Commission's Red
More informationIdentity Theft Prevention Program
ILLINOIS EASTERN COMMUNITY COLLEGES 0 Identity Theft Prevention Program Our mission is to deliver exceptional education and services to improve the lives of our students and to strengthen our communities.
More informationSCOPE AND APPLICABILITY: This policy is applicable to all University faculty and staff.
SUBJECT: DETECTION OF AND RESPONSE TO IDENTITY THEFT RED FLAGS NUMBER: 412 AUTHORIZING BODY: RESPONSIBLE OFFICE: PRESIDENT S EXECUTIVE COUNCIL FINANCE AND ADMINISTRATION DATE ISSUED: OCTOBER 29, 2008 LAST
More informationThe Federal Identity Theft Red Flag Rules and North Carolina Local Health Departments
Health Law bulletin number 89 november 2008 The Federal Identity Theft Red Flag Rules and North Carolina Local Health Departments Jill Moore In November 2007, several federal agencies jointly issued a
More informationPolicy Statement. Definitions -Covered Account -Identifying Information -Identity Theft -Red Flag
Page 1 Austin Peay State University Identity Theft Prevention POLICIES Issued: March 25, 2017 Responsible Official: Vice President for Finance and Administration Responsible Office: Information Technology
More informationAudit Committee Issues
2 Audit Committee Issues January 13, 2010 Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321 N. Clark Street, Suite
More informationUniversity Identity Theft and Detection Program
NUMBER: FINA 4.12 (formerly BUSF 4.12) SECTION: SUBJECT: Administration and Finance University Identity Theft and Detection Program DATE: March 3, 2011 REVISED: March 8, 2016 Policy for: All Campuses and
More informationIdentity Theft Prevention. Red Flags. Training Program
Identity Theft Prevention Red Flags Training Program 1 Red Flags Training Program Adoption Amendment passed in 2003 to the Fair Credit Reporting Act called The Fair and Accurate Credit Transactions Act
More informationWASHTENAW COMMUNITY COLLEGE IDENTITY THEFT DETECTION, PREVENTION, AND MITIGATION PROGRAM
WASHTENAW COMMUNITY COLLEGE IDENTITY THEFT DETECTION, PREVENTION, AND MITIGATION PROGRAM PURPOSE AND SCOPE The Identity Theft Prevention Program was developed pursuant to the Federal Trade Commission s
More informationThe Interagency Guidelines on Identity Theft Detection, Prevention and. Mitigation, commonly referred to as the Red Flag Rules, require each financial
DEVELOPING YOUR DEALERSHIP S WRITTEN PROGRAM TO DETECT, PREVENT, AND MITIGATE IDENTITY THEFT AS REQUIRED BY THE THE RED FLAG RULES AND TO RESPOND TO NOTICES OF ADDRESS DISCREPANCIES The Interagency Guidelines
More informationLexisNexis Developing an Effective Red Flags Rule Program
LexisNexis Developing an Effective Red Flags Rule Program Program Checklist R O I : R E T U R N O N I N F O R M AT I O N S O LU T I O N S Customer Development Authentication & Screening Fraud Prevention
More informationIdentity Theft Prevention Program (DRAFT)
Identity Theft Prevention Program (DRAFT) Subject: Revised: Effective date: Review date: Responsible Party: Financial Affairs N/A TBD Annually TBD MSU-Bozeman Vice President for Administration & Finance
More informationIdentity Theft Prevention Program. Approved by the Board of Trustees on February 20, 2009
Identity Theft Prevention Program Approved by the Board of Trustees on February 20, 2009 I. Purpose & Scope This Program was developed pursuant to the Federal Trade Commission s ( FTC ) Red Flag Rules
More informationEastpointe Community Credit Union Identity Theft and Deterrence Policy
Eastpointe Community Credit Union Identity Theft and Deterrence Policy Areas of Responsibility: Management/Operations Board Approval December 14, 2016 Board Review: December 14, 2016 Last Revision: December
More informationPOLICY SUMMARY FORM. Unit(s) Responsible for Policy Implementation: Vice President for Finance and Administration
POLICY SUMMARY FORM Policy Name: Identity Theft Prevention Policy Number: 14.5 Is this policy new, being reviewed/revised, or deleted? Review/Revise Date of last revision, if applicable: April 14, 2015
More informationDAWSON PUBLIC POWER DISTRICT 300 South Washington Street P. O. Box Lexington, Nebraska Tel. No.- 308/324/2386 Fax No.
DAWSON PUBLIC POWER DISTRICT 300 South Washington Street P. O. Box 777 - Lexington, Nebraska - 68850 Tel. No.- 308/324/2386 Fax No.-308/324/2907 CUSTOMER POLICY IDENTITY THEFT PREVENTION I. OBJECTIVE Page
More informationDriven. FTC Red Flags and Address Discrepancy Rules: Protecting Against Identity Theft L50 L50
Driven NADA Management series L50 A Dealer Guide to THE FTC Red Flags and Address Discrepancy Rules: Protecting Against Identity Theft L50 The National Automobile Dealers Association (NADA) has prepared
More informationOperating Procedures/Guide
HOME SPECIALTY STANDARD OPERATING PROCEDURES Operating Procedures/Guide Effective Date 8/19/2014 Credit is extended by Synchrony Bank. Table of Contents Introduction......................................
More informationCalifornia State University Bakersfield Identity Theft Prevention ( Red Flag ) Implementation Plan
California State University Bakersfield Identity Theft Prevention ( Red Flag ) Implementation Plan May 28, 2010 1.0 INTRODUCTION... 3 2.0 PURPOSE... 3 3.0 DEFINITIONS... 4 4.0 THE PROGRAM... 4 4.1. Program
More informationNumber: Identity Theft Program Procedures and Protocol Responsible Office: Business and Finance
POLICY USF System USF USFSP USFSM Number: 0-109 Title: Identity Theft Program Procedures and Protocol Responsible Office: Business and Finance Date of Origin: 1-11-11 Date Last Amended: Date Last Reviewed:
More informationUniversity of Cincinnati FACTA Red Flag Identity Theft Prevention Program
FACTA Red Flag Identity Theft Prevention Program FACTA Red Flag Policy Program, page 1 of 6 Contents Overview 3 Definition of Terms 3 Covered Accounts..3 List of Red Flags 3 Suspicious Documents...4 Suspicious
More informationRed Flag! Now What? An SME s Guide for FACTA Red Flag Compliance. see} white paper
Red Flag! Now What? An SME s Guide for FACTA Red Flag Compliance see} white paper see} white paper Red Flag! Now What? If you are a large bank, credit union or credit card issuer, you are well aware of
More informationPrivacy and Data Breach Protection Modular application form
Instructions The Hiscox Technology, Privacy and Cyber Portfolio Policy may be purchased on an a-la-carte basis. Some organizations may require coverage for their technology errors and omissions, while
More informationWEST VIRGINIA UNIVERSITY BOARD OF GOVERNORS POLICY 54. Rule on Identity Theft Detection and Prevention Program
WEST VIRGINIA UNIVERSITY BOARD OF GOVERNORS POLICY 54 Rule on Identity Theft Detection and Prevention Program Section 1. General 1.1 Purpose: The purpose of this policy is to establish an Identity Theft
More informationCoreLogic Credco First American Way Poway, CA (800)
Red Flag Regulation WHAT IT IS The Red Flag Regulation implements Sections 114 and 315 of the FACT Act. It finalizes three distinct requirements two of which are relevant to automotive, RV and marine dealers,
More informationTHE COOPER UNION FOR THE ADVANCEMENT OF SCIENCE AND ART. February 24, 2010
I. Introduction THE COOPER UNION FOR THE ADVANCEMENT OF SCIENCE AND ART RED FLAGS IDENTITY THEFT PREVENTION PROGRAM A. Purpose February 24, 2010 The Cooper Union for the Advancement of Science and Art
More informationOlivet Nazarene University Identity Theft Prevention Program
Program Adoption Olivet Nazarene University ( University ) developed this identity Theft Prevention Program ( Program ) pursuant to the Federal Trade Commission's Red Flags Rule ( Rule ), which implements
More informationTo print a copy of this presentation: Click on the printer icon in the lower right hand corner. Convert the presentation to PDF and print as usual.
Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients Housekeeping Issues Call 866.493.2825 for technology assistance Dial *0 (star/zero) for audio assistance
More informationUniversity of Connecticut IDENTITY THEFT PREVENTION PROGRAM
University of Connecticut IDENTITY THEFT PREVENTION PROGRAM I. BACKGROUND II. III. IV. PURPOSE AND SCOPE DEFINITIONS IDENTIFICATION & DETECTION OF RED FLAGS V. APPROPRIATELY RESPONDING WHEN RED FLAGS ARE
More informationSUMMARY: The Federal Trade Commission ( FTC or Commission ) requests public
[Billing Code: 6750-01S] FEDERAL TRADE COMMISSION 16 CFR Part 314 RIN 3084-AB35 Standards for Safeguarding Customer Information AGENCY: Federal Trade Commission. ACTION: Request for public comment. SUMMARY:
More informationCyber, Data Risk and Media Insurance Application form
Instructions The Hiscox Technology, Privacy and Cyber Portfolio Policy may be purchased on an a-la-carte basis. Some organizations may require coverage for their technology errors and omissions, while
More informationRED FLAG RULES ANNUAL REPORT TO MAYOR AND COUNCIL
BOISE CITY RISK AND SAFETY SERVICESDIVISION DEPARTMENT OF FINANCE AND ADMINISTRATION RED FLAG RULES ANNUAL REPORT TO MAYOR AND COUNCIL AS REQUIRED BY SECTIONS 114 AND 315 OF THE FAIR AND ACCURATE CREDIT
More informationELECTRONIC SIGNATURE REQUIREMENTS FOR LENDERS
ELECTRONIC SIGNATURE REQUIREMENTS FOR LENDERS June 2015 Purpose The Electronic Signatures in Global and National Commerce (ESIGN) Act (15 U.S.C. 7001-7006), enacted in 2000, permits, but does not require,
More informationA Step By Step Guide To Dealership Compliance Team One research and Training /Summit Group
A Step By Step Guide To Dealership Compliance 2008 Team One research and Training /Summit Group As you probably already know, 2008 has brought the automobile dealer a whole new set of compliance issues
More informationChristopher Newport University. Policy: Red Flag Identity Theft Identification and Prevention Program Policy Number: 3030
Christopher Newport University Policy: Red Flag Identity Theft Identification and Prevention Program Policy Number: 3030 Executive Oversight: Executive Vice President Contact Office: Comptroller s Office
More informationFOX VALLEY ORTHOPEDICS. Identity Compliance Program
I. ADOPTION OF WRITTEN PROGRAM ( Program ) Fox Valley Orthopedics (the Practice ) adopts this written program to assist in identifying sensitive information, as well as identifying, detecting and mitigating
More informationRed Flags Rule Identity Theft Training Program
Red Flags Rule Identity Theft Training Program October 2017 Purpose of Training The purpose of the UA Little Rock Identity Theft Prevention Program is to reduce the exposure of financial and personal loss
More informationThe National Association of Community Health Centers, Inc. Issue Brief on. Complying with the FTC s Red Flag Rules. February, 2009
1/28/2009 The National Association of Community Health Centers, Inc. Issue Brief on Complying with the FTC s Red Flag Rules February, 2009 Prepared for NACHC by: Michael Glomb Feldesman Tucker Leifer Fidell,
More informationJack Byrne Ford & Mercury Identity Theft Program (ITPP)
Jack Byrne Ford & Mercury Identity Theft Program (ITPP) PART ONE BACKGROUND 1. Effective Date All affected employees of Jack Byrne Ford & Mercury ( Dealership ) must comply with the terms of this policy
More informationIndemnification: Trends and Hot Topics
For Audio Participation Dial: 1.866.283.8243 Passcode: *1349975* Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321
More informationCLIENT UPDATE SEC AND CFTC ISSUE FINAL RULES ON IDENTITY THEFT PROTECTION
CLIENT UPDATE SEC AND CFTC ISSUE FINAL RULES ON IDENTITY THEFT PROTECTION WASHINGTON, DC Satish M. Kini smkini@debevoise.com Kenneth J. Berman kjberman@debevoise.com Renee M. Cipro* rmcipro@debevoise.com
More informationData Security Addendum for inclusion in the Contract between George Mason University (the University ) and the Selected Firm/Vendor
Data Security Addendum for inclusion in the Contract between George Mason University (the University ) and the Selected Firm/Vendor This Addendum is applicable only in those situations where the Selected
More informationTHIS ENDORSEMENT CHANGES THE POLICY. PLEASE READ IT CAREFULLY CRISIS MANAGEMENT COVERAGE The Insurer shall pay on behalf of the Insured: 1) Crisis Management Expenses that are a direct result of a Network
More informationFoley & Lardner LLP. May 13, :00 p.m. 2:00 p.m. EST
Attorney Advertising Prior results do not guarantee a similar outcome Models used are not clients but may be representative of clients 321 N. Clark Street, Suite 2800, Chicago, IL 60610 312.832.4500 Foley
More informationAUDIT AND FINANCE COMMITTEE Wednesday, June 17, 2009
Item: AF: A-1 AUDIT AND FINANCE COMMITTEE Wednesday, June 17, 2009 SUBJECT: REQUEST FOR APPROVAL OF FLORIDA ATLANTIC UNIVERSITY S IDENTITY THEFT PREVENTION PROGRAM. PROPOSED COMMITTEE ACTION Recommend
More informationIdentity Theft Prevention Program
Slide 1 Identity Theft Prevention Program Welcome to the Identity Theft Prevention Program annual training course. Your personal identification information can be used by individuals seeking to use your
More informationFinancial Transaction
Administrative Procedure 5800 Prevention of Identity Theft in Student Financial Transaction I. The Purpose of the Identity Theft Prevention Program The purpose of this Identity Theft Prevention Program
More informationCyber Risk Proposal Form
Cyber Risk Proposal Form Company or trading name Address Postcode Country Telephone Email Website Date business established Number of employees Do you have a Chief Privacy Officer (or Chief Information
More informationAP 5800 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
Last Reviewed May 24, 2016 AP 5800 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS Reference: 15 U.S. Code Section 1681m(e) (Fair and Accurate Credit Transactions Act (FACT ACT or FACTA))
More informationNAU Police Department s Identity Theft Victim s Packet
NAU Police Department s Identity Theft Victim s Packet Information and Instructions This packet should be completed once you have contacted the NAU Police Department and obtained a police report number
More informationPREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
AP 5800 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS References: 15 U.S. Code Section 1681m(e) (Fair and Accurate Credit Transactions Act (FACT ACT or FACTA)) I. The Purpose of the Identity
More informationRiverside Community College District Policy No Student Services PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
Riverside Community College District Policy No. 5900 Student Services BP 5900 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS Reference: Fair and Accurate Credit Transactions Act, (15 U.S.C.
More informationADMINISTRATIVE PROCEDURE 5800 DESERT COMMUNITY COLLEGE DISTRICT
ADMINISTRATIVE PROCEDURE 5800 DESERT COMMUNITY COLLEGE DISTRICT PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS The purpose of this Identity Theft Prevention Program (ITPP) is to control
More informationPrevention of Identity Theft in Student Financial Transactions
AP 5800 Reference: Prevention of Identity Theft in Student Financial Transactions 15 U.S. Code Section 1681m(e) (Fair and Accurate Credit Transactions Act (FACT ACT or FACTA)) Date Issued: November 5,
More informationClarion University Identity Theft Prevention Program
Clarion University Identity Theft Prevention Program A) Purpose The purpose of the Identity Theft Prevention Program (Program) is to detect, prevent and mitigate identity theft in connection with any covered
More informationIdentity Theft Victim s Packet
Identity Theft Victim s Packet Information and Instructions This packet is to be completed once you have contacted Reno Police Department, complete a crime report and obtained a police report case number
More informationIdentity Theft Victim s Packet
Revised April 2010 Identity Theft Victim s Packet Information and Instructions This packet is to be completed once you have contacted the El Paso County Sheriff s Office and obtained a police report number
More informationPalomar Community College District Procedure AP 5900 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
1 STUDENT SERVICES 2 3 AP 5900 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 References: Fair
More informationThe New England College of Optometry Identity Theft Prevention Program October 30, 2009 _
The New England College of Optometry Identity Theft Prevention Program October 30, 2009 _ Policy Adoption The New England College of Optometry ( College ) has developed an Identity Theft Prevention Program
More informationREF STANDARD PROVISIONS
This Data Protection Addendum ( Addendum ) is an add- on to the Purchasing Terms and Conditions. It is applicable only in those situations where the Selected Firm/Vendor provides goods or services under
More informationORGANIZATIONAL MANUAL
I. PURPOSE ORGANIZATIONAL MANUAL IDENTITY THEFT PROTECTION A. To establish an Identity Theft Prevention Program designed to detect, prevent and mitigate Identity Theft in connection with the opening of
More informationFive Key Steps to Developing an nformation Security Program
Five Key Steps to Developing an nformation Security Program Driving Business Advantage Five Key Steps to Developing an Information Security Program by Gabriel M. Helmer Foley Hoag ebook Contents Introduction...
More informationCybersecurity Threats: What Retirement Plan Sponsors and Fiduciaries Need to Know and Do
ARTICLE Cybersecurity Threats: What Retirement Plan Sponsors and Fiduciaries Need to Know and Do By Gene Griggs and Saad Gul This article analyzes cybersecurity issues for retirement plans. Introduction
More informationPREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
Reference: 15 U.S. Code Section 1681m(e) (Fair and Accurate Credit Transactions Act (FACT ACT or FACTA)) I. The Purpose of the Identity Theft Prevention Program The purpose of this Identity Theft Prevention
More informationUM Identity Theft Protection Policy
UM Identity Theft Protection Policy Summary/Purpose: The purpose of the UM Identify Theft Protection Policy is to establish an Identity Theft Prevention Program pursuant to the Federal Trade Commission
More informationConducting KYC of Third Parties: Best Practices for Conducting Due Diligence
Conducting KYC of Third Parties: Best Practices for Conducting Due Diligence Risk-Based Due Diligence of Third Parties Shaswat Das Hunton Andrews Kurth LLP April 2018 Why Conduct Third Party Due Diligence?
More informationU.S. Private-sector Privacy Certification
1 Page 1 of 5 U.S. Private-sector Privacy Certification Outline of the Body of Knowledge for the Certified Information Privacy Professional/United States (CIPP/US ) I. Introduction to the U.S. Privacy
More informationNote: Action items are italicized
BEREA COLLEGE Red Flag Rules/ Identity Theft Prevention Policy Document No. FIN002 Effective Date 05/2009 Revision Date Pages 1-7 Approval: On File in F/A Note: Action items are italicized 1.0 Background
More informationChapter Five: Student Services and Operations AP 5800 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS
AP 5800 PREVENTION OF IDENTITY THEFT IN STUDENT FINANCIAL TRANSACTIONS I. Purpose of the Identity Theft Prevention Program The purpose of this Identity Theft Prevention Program (ITPP) is to control reasonably
More informationIdentity Theft Prevention Program Red Flag Rule
DIVISION OF FINANCE Committed to Service Excellence Identity Theft Prevention Program Red Flag Rule Texas A&M University and Texas A&M @ Galveston CSBA Workshop May 21, 2009 Presented by Stacie Sodolak
More information