(A) This program provides for appropriate responses to detected red flags to prevent and mitigate identity theft. The response shall be commensurate with the degree of risk posed. Appropriate responses include:
(1) Monitoring. Monitoring a covered account for evidence of identity theft;
(2) Customer contact. Contacting the customer (contact may be made by e-mail, certified mail or telephone to the affected customer);
(3) Change passcodes. Changing any passwords, security codes or other security devices that permit access to a covered account;
(4) New account number. Reopening a covered account with a new account number;
(5) Not open. Not opening a new covered account;
(6) Close. Closing an existing covered account;
(7) Notify law enforcement. Notifying the town’s Police Department and any other necessary law enforcement personnel; or
(8) Not respond. Determining that no response is warranted under the particular circumstances.
(B) Any utility staff employee who becomes aware of a suspected or actual fraudulent use of a customer or potential customer’s identity must first and immediately notify the Town Administrator and Clerk- Treasurer. The Town Administrator and Clerk-Treasurer will then determine the appropriate response in accordance with one or more of the options above.
(C) In the event notification to a customer is necessary, such notification shall include relevant information related to the incident including:
(1) The type of identifying information involved;
(2) The telephone number that the person can call for further information and assistance;
(3) Local law enforcement contact information; and
(4) Federal Trade Commission contact information (877-438-4338 or www.consumer.gov/idtheft).
(Ord. 1046, passed 2-3-08)