Orange County NC Website
Browse       Search
~1 <br />County may utilize computer software to randomly generate assigned <br />CINs or to encrypt account numbers and CINs. <br />B. existing Accounts. In order to detect any of the Red Flags identified above for an <br />ex~stxng account, County personnel will take the following steps to monitor <br />transactions with an account: <br />1. Verify the identification of customers if they request information din <br />person, via telephone, via facsimile, via email}; <br />2. Verify the validity of requests to change billing addresses; and <br />3. Verify changes in banking information given for billing and payment <br />purposes. <br />4. In the event that credit card payments are made over the Internet or <br />processed through a third party service provider, such third party service <br />provider shall certify that its Identity Theft Prevention Policy is adequate <br />and is incompliance with FACIA and it's implementing Regulations. <br />5. All credit card payments made aver the telephone or the County's <br />website sha11 be entered directly into the customer's account information <br />in the computer database. <br />6. Account statements and receipts for covered accounts shall include only <br />the last four digits of the credit or debit card or the bank account used for <br />payment of the covered account. <br />7. when receiving credit card payments over the telephone get the 3 or 4 <br />digit card certification code from. the customer. <br />VII. Preventing and Mitigating Identity Theft. In the event County personnel detect <br />any identified Red Flags, such personnel must notify the Department Director, or <br />their designee. The Department Director or their designee shall take one or more <br />of the following steps, depending on the degree of risk posed by the Red Flag: <br />A. Prevent and Mitigate <br />1. Continue to monitor an account for evidence of Identity Theft; <br />2. Contact the customer; <br />3. Change any passwords or other security devices that permit access to <br />accounts; <br />4. Not open a new account; <br />5. Close an existing account; <br />~. Reopen an account with a new number; <br />7. Notify law enforcement, in the event someone other than the customer has <br />accessed the customer's account causing additional charges to accrue or <br />accessing personal identifying information; or <br />S. Determine that no response is warranted under the particular <br />circumstances. <br />Draft <br />identity The, ft PreventiaM Program Policy <br />Page S of 8 <br />