§ 51.57 RESPONSE.
   (A)   This program provides for appropriate responses to detected red flags to prevent and mitigate identity theft. The response shall be commensurate with the degree of risk posed. Appropriate responses include:
      (1)   Monitoring. Monitoring a covered account for evidence of identity theft;
      (2)   Customer contact. Contacting the customer (contact may be made by e-mail, certified mail or telephone to the affected customer);
      (3)   Change passcodes. Changing any passwords, security codes or other security devices that permit access to a covered account;
      (4)   New account number. Reopening a covered account with a new account number;
      (5)   Not open. Not opening a new covered account;
      (6)   Close. Closing an existing covered account;
      (7)   Notify law enforcement. Notifying the town’s Police Department and any other necessary law enforcement personnel; or
      (8)   Not respond. Determining that no response is warranted under the particular circumstances.
   (B)   Any utility staff employee who becomes aware of a suspected or actual fraudulent use of a customer or potential customer’s identity must first and immediately notify the Town Administrator and Clerk- Treasurer. The Town Administrator and Clerk-Treasurer will then determine the appropriate response in accordance with one or more of the options above.
   (C)   In the event notification to a customer is necessary, such notification shall include relevant information related to the incident including:
      (1)   The type of identifying information involved;
      (2)   The telephone number that the person can call for further information and assistance;
      (3)   Local law enforcement contact information; and
      (4)   Federal Trade Commission contact information (877-438-4338 or www.consumer.gov/idtheft).
(Ord. 1046, passed 2-3-08)