Kroll Ontrack | Home

Red Flags Rule FAQ

Suspect a Data Breach?

  • Call the Data Breach Hotline:
    1-877-300-6816 (24/7 access)

Contact Us

Learn More

HITECH Hotline
A solution for healthcare data breach response.

Learn more

Additional Resources

Red Flags Rule Training demo

Subscribe to our Data Security Newsletter

Receive our privacy awareness training

On October 31, 2007, a joint committee of the OCC, Federal Reserve Board, FDIC, OTS, NCUA and the Federal Trade Commission passed the final legislation for Section 114 of the Fair and Accurate Credit Transactions Act of 2003 (FACTA), also known as the Identity Theft Red Flags and Notices of Address Discrepancy or "Red Flags Rule." The rule requires that all organizations subject to the legislation must develop and implement a formal, written and revisable "Identity Theft Prevention Program" (Program) to detect, prevent and mitigate identity theft.

The enforcement date of the Red Flags Rule has been delayed numerous times by the Federal Trade Commission (FTC), in part due to concerns over the broad scope of the rule. In response, Congress has passed the Red Flag Program Clarification Act of 2010, which narrowed the definition of “creditor” that is used to determine entities covered by the rule. The Red Flags Rule went in to effect on December 31, 2010 and will now be enforced by the FTC under the most recent amendment.

To assist affected organizations, Kroll Fraud Solutions developed a comprehensive Red Flags Rule Compliance Program. In addition to this Red Flags Rule FAQ, Kroll's Program offers a customizable Program template, as well as an employee training guide, to help your organization towards compliance with this legislation.

Register below for immediate access to the Kroll Red Flags Rule FAQ pdf.

*
*
*
*
*
*
*
*
Subscription Preferences

Would you like to receive monthly email communication on the latest
trends in data breach planning, incident management, and identity theft?