The program shall provide for appropriate responses to detected red flags to prevent and mitigate identity theft. The response shall be commensurate with the degree of risk posed. Appropriate responses may include:
(a) Monitor a covered account for evidence of identity theft;
(b) Contact the customer;
(c) Change any passwords, security codes or other security devices that permit access to a covered account;
(d) Reopen a covered account with a new account number;
(e) Not open a new covered account;
(f) Close an existing covered account;
(g) Notify law enforcement; or
(h) Determine no response is warranted under the particular circumstances.
(Ord. 109-09. Passed 7-13-09.)