Main Nav

Red Flags Rule Enforcement Deadline Extended by FTC Again

The Federal Trade Commission (FTC) announced that it will delay enforcement of the Red Flags Rule until November 1, 2009, to allow creditors and financial institutions more time to develop and implement written Identity Theft Prevention Programs. This new extension will allow FTC staff to "redouble its efforts to educate [small businesses and other entities] about compliance with the Red Flags Rule and ease compliance by providing additional resources and guidance to clarify whether businesses are covered by the Rule and what they must do to comply."

The FTC's Red Flags website offers resources to help entities determine if they are covered and, if they are, how to comply with the Rule. It includes an online compliance template that enables companies to design their own Identity Theft Prevention Program through an easy-to-do form, as well as articles directed to specific businesses and industries, guidance manuals, and Frequently Asked Questions to help companies navigate the Rule. EDUCAUSE also has sample campus policies and programs available on the ID Theft Red Flags resource center page.

Today’s announcement does not affect other federal agencies’ enforcement of the original November 1, 2008 compliance deadline for institutions subject to their oversight.

Tags from the EDUCAUSE Library