ID Theft Red Flags - 34 Resources

Overview
Publications (16)
Presentations (5)
Blogs (13)

Overview

On December 18, 2010, President Obama signed into law the Red Flag Program Clarification Act. The new law limits the circumstances in which creditors are covered by the Red Flags Rule. The FTC is revising the materials on its website to reflect the change in the law. The FTC also released a statement regarding the House and Senate passage of legislation clarifying the Red Flags Rule on December 8, 2010.

The FTC's Red Flags website offers resources to help entities determine if they are covered and, if they are, how to comply with the Rule. It includes an online compliance template that enables companies to design their own Identity Theft Prevention Program through an easy-to-do form, as well as articles directed to specific businesses and industries, guidance manuals, and Frequently Asked Questions to help companies navigate the Rule. EDUCAUSE also has sample campus policies and programs available on this page.

October 2008 Red Flags Webcast

Creating a Compliance Program for Identity Theft Rules

October 22, 2008 - Red Flags Webcast (Archived)

Speaker: Naomi Lefkovitz, Attorney, Division of Privacy and Identity Protection, Federal Trade Commission

Summary: New federal regulations to address identity theft go into effect November 1, 2008, and are likely to affect colleges and universities in nuanced ways. Compliance will require careful study and collaboration among business officers, human resources, legal counsel, student services, IT, and other affected campus units. The rules require users of consumer reports to develop reasonable policies and procedures to apply when they receive a notice of address discrepancy from a consumer reporting agency. They also require that institutions develop and implement an Identity Theft Prevention Program for combating identity theft in connection with new and existing accounts.

Who is subject to and must comply with the regulations on ID Theft Red Flags and Notices of Address Discrepancy? What business practices at colleges and universities are covered by the rules? What are some of the things that entities subject to the rules must do? What role does IT play in compliance with the rules? What are the penalties for failure to comply? This webcast will address these and many other questions, in addition to providing an online forum for community collaboration and sharing.

Powerpoint Slides:

An Overview of the Final Rulemaking on Identity Theft Red Flags and Address Discrepancies

References:

FTC Announcement: "Agencies Issue Final Rules on Identity Theft Red Flags and Notices of Address Discrepancy"
FTC Identity Theft website
NACUA General Summary of FACTA
NACUBO Bulletin: "FTC's Red Flag Rule Likely to Affect Colleges"

Sample Campus Policies for FTC "Red Flags" Rules

Updated February 2011

Publications (16)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about ID Theft Red Flags.

Item ID	Title	Pub Date	Views
CSD5512	Identity Theft Red Flags and Address Discrepancies Under The Fair and Accurate Credit Transactions Act of 2003	09/29/2008	407
CSD5513	Agencies Issue Final Rules on Identity Theft Red Flags and Notices of Address Discrepancy	10/31/2007	1,500
CSD5514	FTC Identity Theft	09/30/2008	870
CSD5515	Fair Credit Reporting Act (FCRA) (amended by the Consumer Credit Reporting Reform Act of 1996 and the Fair and Accurate Credit Transactions Act of 2003)	09/29/2008	1,240
CSD5516	‘Red Flag’ Regulations Require Financial Institutions and Creditors to Have Identity Theft Prevention Programs	07/08/2008	1,802
CSD5517	Federal Register: ID Theft Red Flags Final Rules and Guidelines	11/07/2007	2,392
CSD5518	The FTC's “Red Flag Regulations” To Combat Identity Theft Go Into Effect On November 1, 2008	07/14/2008	1,102
CSD5519	FTC Issues Red Flag Rules Reminder; Ensuring IT is Ready as Unlimited Liability Looms on the Horizon	08/25/2008	1,343
CSD5541	Red Flag ID Theft Programs: Time to Put it in Writing	08/19/2008	606
CSD5548	FDIC Approves Final Rules from FACTA	10/23/2007	187
CSD5549	Year End Issuances by Federal Regulators Address a Multitude of Privacy Issues	01/23/2008	89
CSD5550	FACTA: What Is "Consumer Information"	10/24/2007	254
CSD5551	Disposal of Consumer Report Information and Records	06/30/2005	591
CSD5552	Identity Theft Red Flags and Address Discrepancies under the Fair and Accurate Credit Transactions Act of 2003	10/15/2007	758
CSD5560	Sample Identity Theft Prevention Program	11/18/2008	1,842
CSD5511	FTC's Red Flag Rule Likely to Affect Colleges	09/23/2008	2,405

Presentations (5)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with ID Theft Red Flags

Item ID	Title	Pub Date	Views
E092_179694	Legal and Compliance Issues	11/05/2009	1,107
NC09_48316	Ferreting Out Sensitive Data	03/10/2009	674
E08_47580	Net@EDU Identity Management Working Group (open meeting)	10/29/2008	237
E08_47582	Policy and Law	10/29/2008	654
WSE0802	Creating a Compliance Program for Identity Theft Rules	10/22/2008	2,158

Blogs (13)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
FTC Further Delays Enforcement of the "Red Flags Rule" Through December 31, 2010	Valerie M. Vogel, EDUCAUSE	06/11/2010	59
Academic Medical Center Security and Privacy Conference: Registration Now Open	Valerie M. Vogel, EDUCAUSE	03/15/2010	148
FTC Extends Enforcement Deadline for Identity Theft Red Flags Rule Until June 1, 2010	Valerie M. Vogel, EDUCAUSE	11/04/2009	61
October 30, 2009: FTC Extends Enforcement Deadline for Identity Theft Red Flags Rule Until June 1, 2010	Rodney Petersen, EDUCAUSE	11/03/2009	56
Red Flags Rule Enforcement Deadline Extended by FTC Again	Valerie M. Vogel, EDUCAUSE	07/31/2009	261
The FTC Delays the Red Flags Rule… Again!	Anna Gould, EDUCAUSE	07/31/2009	96
FTC Delays Enforcement of ‘Red Flags’ Rule	Anna Gould, EDUCAUSE	05/01/2009	313
FTC Guide: Fighting Fraud with the Red Flags Rule	Valerie M. Vogel, EDUCAUSE	04/08/2009	1,015
New FTC Resource: Fighting Fraud with the Red Flags Rule	Rodney Petersen, EDUCAUSE	04/01/2009	653
FTC Delays Enforcement of ID Theft Red Flag Rule Until May 1, 2009	Rodney Petersen, EDUCAUSE	10/22/2008	1,176
Free EDUCAUSE Webcast 10/22/08 on Identity Theft Rules	Valerie M. Vogel, EDUCAUSE	10/13/2008	848
Free EDUCAUSE Webcast 10/22/08 on Identity Theft Rules	Rodney Petersen, EDUCAUSE	10/08/2008	534
Identity Theft Rules Cover Non-Profits, Including Institutions of Higher Education	Rodney Petersen, EDUCAUSE	10/08/2008	763

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!