Agenda - 04-21-2009 - 4n - Laserfiche WebLink

Browse Search

ORANGE COUNTY BOARD OF COMMISSIONERS ACTION AGENDA ITEM ABSTRACT Meeting Date: April 21, 2009 Action Agenda Item No. ~ - n SUBJECT: Fair and Accurate Credit Transactions Act of 2003 ("FACTA") Red Flags Rules DEPARTMENT: Human Resources PUBLIC HEARING: (Y/N) No ATTACHMENT(S): Draft Orange County Identity Theft Prevention Program Policy INFORMATION CONTACT: Annette Moore, Staff Attorney 245-2317 PURPOSE: To consider adopting an Identity Theft Prevention Program Policy to comply with the federal Fair and Accurate Credit Transactions Act of 2003 ("FACTA") Red Flags Rules. BACKGROUND: On' November 9, 2007, the federal government published the "Red Flags Rule," pursuant to the Fair and Accurate Credit Transactions Act of 2003 ("FACTA"). Red Flags are patterns, practices or specific activities indicating the. possible existence of identity theft.' Examples of red flags include: suspicious documents, suspicious personal identifying information, unusual .use of or suspicious activity related to an account and notices to customers of possible identity theft. The Red Flags Rule, while primarily targeted at financial institutions maintaining large amounts of sensitive consumer information, require both financial institutions and "other creditors" with covered accounts to develop and implement written "identity theft prevention programs." The Federal Trade Commission has identified governments as creditors under the Red Flags Regulations. An Identity Theft Prevention Program provides methods to detect when accounts are fraudulent; procedures to prevent establishment of false accounts; procedures to ensure existing accounts are not being manipulated; and procedures to respond to identity theft. The Red Flags Rule became effective January 2008. However, compliance by covered entities such as local governments was expected in November 2008 but extended to May 1, 2009. The Red Flags Rule applies to departments within Orange County that are "creditors" and have "covered accounts." A "creditor" is any entity which regularly extends, renews or continues credit or arranges for the extension, renewal or continuation of credit. Orange County Departments allowing clients to receive services and defer payments are "creditors" under the Rule. In order to develop an Identity Theft Prevention Program the County was required to: • Assess the existing identity theft risk for new and existing accounts. ' i6 c.F.x. § 6gi.z(b)(9)