ID Theft Red Flags - 31 Resources

Overview
Publications (16)
Presentations (4)
Blogs (11)

Overview

Updated October 30, 2009 - The Federal Trade Commission will delay enforcement of the new “Red Flags Rule” until June 1, 2010, to allow creditors and financial institutions more time to develop and implement written Identity Theft Prevention Programs. This new extension will allow FTC staff to "redouble its efforts to educate [small businesses and other entities] about compliance with the Red Flags Rule and ease compliance by providing additional resources and guidance to clarify whether businesses are covered by the Rule and what they must do to comply." The latest announcement does not affect other federal agencies’ enforcement of the original November 1, 2008 compliance deadline for institutions subject to their oversight.

The FTC's Red Flags website offers resources to help entities determine if they are covered and, if they are, how to comply with the Rule. It includes an online compliance template that enables companies to design their own Identity Theft Prevention Program through an easy-to-do form, as well as articles directed to specific businesses and industries, guidance manuals, and Frequently Asked Questions to help companies navigate the Rule. EDUCAUSE also has sample campus policies and programs available on this page.

Webcast

Creating a Compliance Program for Identity Theft Rules

October 22, 2008 - Webcast Archived

Speaker: Naomi Lefkovitz, Attorney, Division of Privacy and Identity Protection, Federal Trade Commission

Summary: New federal regulations to address identity theft go into effect November 1, 2008, and are likely to affect colleges and universities in nuanced ways. Compliance will require careful study and collaboration among business officers, human resources, legal counsel, student services, IT, and other affected campus units. The rules require users of consumer reports to develop reasonable policies and procedures to apply when they receive a notice of address discrepancy from a consumer reporting agency. They also require that institutions develop and implement an Identity Theft Prevention Program for combating identity theft in connection with new and existing accounts.

Who is subject to and must comply with the regulations on ID Theft Red Flags and Notices of Address Discrepancy? What business practices at colleges and universities are covered by the rules? What are some of the things that entities subject to the rules must do? What role does IT play in compliance with the rules? What are the penalties for failure to comply? This webcast will address these and many other questions, in addition to providing an online forum for community collaboration and sharing.

Powerpoint Slides:

An Overview of the Final Rulemaking on Identity Theft Red Flags and Address Discrepancies

References:

FTC Announcement: "Agencies Issue Final Rules on Identity Theft Red Flags and Notices of Address Discrepancy"
FTC Identity Theft website
NACUA General Summary of FACTA
NACUBO Bulletin: "FTC's Red Flag Rule Likely to Affect Colleges"

Sample Campus Policies for FTC "Red Flags" Rules

Identity Theft Prevention Program -- Sample Policy (prepared by the Kentucky League of Cities)
Kalamazoo College Identity Theft Prevention Program -- Sample Policy
Model Identity Theft Policy and Adopting Resolution
Sample Identity Theft Prevention Program

Publications (16)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about ID Theft Red Flags.

Item ID	Title	Resource Category	Pub Date	Views
CSD5511	FTC's Red Flag Rule Likely to Affect Colleges Elizabeth B. Meers and Daniel S. Meade Articles, Papers, and Reports	Community Recommendation	09/23/2008	1,957
CSD5513	Agencies Issue Final Rules on Identity Theft Red Flags and Notices of Address Discrepancy Government Documents, Laws, Testimonies or Reports	Community Recommendation	10/31/2007	1,468
CSD5551	Disposal of Consumer Report Information and Records Government Documents, Laws, Testimonies or Reports	Community Recommendation	06/30/2005	568
CSD5550	FACTA: What Is "Consumer Information" Articles, Papers, and Reports	Community Recommendation	10/24/2007	221
CSD5515	Fair Credit Reporting Act (FCRA) (amended by the Consumer Credit Reporting Reform Act of 1996 and the Fair and Accurate Credit Transactions Act of 2003) Articles, Papers, and Reports	Community Recommendation	09/29/2008	744
CSD5548	FDIC Approves Final Rules from FACTA Articles, Papers, and Reports	Community Recommendation	10/23/2007	166
CSD5517	Federal Register: ID Theft Red Flags Final Rules and Guidelines Government Documents, Laws, Testimonies or Reports	Community Recommendation	11/07/2007	2,254
CSD5514	FTC Identity Theft Government Documents, Laws, Testimonies or Reports	Community Recommendation	09/30/2008	826
CSD5519	FTC Issues Red Flag Rules Reminder; Ensuring IT is Ready as Unlimited Liability Looms on the Horizon Articles, Papers, and Reports	Community Recommendation	08/25/2008	1,221
CSD5512	Identity Theft Red Flags and Address Discrepancies Under The Fair and Accurate Credit Transactions Act of 2003 Articles, Papers, and Reports	Community Recommendation	09/29/2008	382
CSD5552	Identity Theft Red Flags and Address Discrepancies under the Fair and Accurate Credit Transactions Act of 2003 Government Documents, Laws, Testimonies or Reports	Community Recommendation	10/15/2007	714
CSD5541	Red Flag ID Theft Programs: Time to Put it in Writing Articles, Papers, and Reports	Community Recommendation	08/19/2008	521
CSD5560	Sample Identity Theft Prevention Program Programs and Projects		11/18/2008	1,400
CSD5518	The FTC's “Red Flag Regulations” To Combat Identity Theft Go Into Effect On November 1, 2008 Articles, Papers, and Reports	Community Recommendation	07/14/2008	1,068
CSD5549	Year End Issuances by Federal Regulators Address a Multitude of Privacy Issues Articles, Papers, and Reports	Community Recommendation	01/23/2008	81
CSD5516	‘Red Flag’ Regulations Require Financial Institutions and Creditors to Have Identity Theft Prevention Programs Government Documents, Laws, Testimonies or Reports	Community Recommendation	07/08/2008	1,749

Presentations (4)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with ID Theft Red Flags

Item ID	Title	Resource Category	Pub Date	Views
WSE0802	Creating a Compliance Program for Identity Theft Rules Naomi B. Lefkovitz Presentations/Speeches	Web Seminars EDUCAUSE	10/22/2008	2,046
NC09_48316	Ferreting Out Sensitive Data Antwon Ward and Allison F. Dolan Presentations/Speeches	NERCOMP	03/10/2009	596
E08_47580	Net@EDU Identity Management Working Group (open meeting) Linda Hilton Presentations/Speeches	EDUCAUSE Annual	10/29/2008	228
E08_47582	Policy and Law Steven L. Worona and Tracy Mitrano Presentations/Speeches	EDUCAUSE Annual	10/29/2008	607

Blogs (11)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
Free EDUCAUSE Webcast 10/22/08 on Identity Theft Rules	Valerie M. Vogel, EDUCAUSE	10/13/2008	835
Free EDUCAUSE Webcast 10/22/08 on Identity Theft Rules	Rodney J. Petersen, EDUCAUSE	10/08/2008	527
FTC Delays Enforcement of ID Theft Red Flag Rule Until May 1, 2009	Rodney J. Petersen, EDUCAUSE	10/22/2008	1,146
FTC Delays Enforcement of ‘Red Flags’ Rule	Anna Gould, EDUCAUSE	05/01/2009	306
FTC Extends Enforcement Deadline for Identity Theft Red Flags Rule Until June 1, 2010	Valerie M. Vogel, EDUCAUSE	11/04/2009	23
FTC Guide: Fighting Fraud with the Red Flags Rule	Valerie M. Vogel, EDUCAUSE	04/08/2009	883
Identity Theft Rules Cover Non-Profits, Including Institutions of Higher Education	Rodney J. Petersen, EDUCAUSE	10/08/2008	650
New FTC Resource: Fighting Fraud with the Red Flags Rule	Rodney J. Petersen, EDUCAUSE	04/01/2009	599
October 30, 2009: FTC Extends Enforcement Deadline for Identity Theft Red Flags Rule Until June 1, 2010	Rodney J. Petersen, EDUCAUSE	11/03/2009	36
Red Flags Rule Enforcement Deadline Extended by FTC Again	Valerie M. Vogel, EDUCAUSE	07/31/2009	232
The FTC Delays the Red Flags Rule… Again!	Anna Gould, EDUCAUSE	07/31/2009	93

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!