Once potentially fraudulent activity is detected, an employee must act quickly to protect the customer and municipality from damage and loss and to prevent and mitigate identity theft. The response shall be commensurate with the degree of risk posed. Appropriate responses may include:
(a) Monitor a covered account for evidence of identity theft;
(b) Contact the customer;
(c) Change any passwords, security codes or other security devices that permit access to a covered account;
(d) Reopen a covered account with a new account number;
(e) Not open a new covered account;
(f) Close an existing covered account;
(g) Notify law enforcement; or
(h) Determine no response is warranted under the particular circumstances.
(Ord. 1775. Passed 9-10-09.)