§ 34.62 PURPOSE.
   (A)   The village adopts the program to help protect employees, customers, contractors, and itself from harm and damage related to, or caused by, the loss or misuse of sensitive information. The program also will assist the village in detecting, preventing, and mitigating identity theft. The program does so by identifying certain "red flags" that suggest or indicate the possibility of identity theft, and by providing guidelines on how the village should respond once it detects any such red flags. Further, the program will:
      (1)   Define sensitive information;
      (2)   Describe the physical security of data when it is printed on paper;
      (3)   Describe the electronic security of data when stored and distributed; and
      (4)   Place the village in compliance with state and federal law regarding identity theft protection.
   (B)   The program has been tailored to the size, complexity and the nature of the village's operations. The program also has been designed in order to:
      (1)   Identify relevant red flags for new and existing covered accounts and incorporate those red flags into the program;
      (2)   Detect red flags that have been incorporated into the program;
      (3)   Allow the village to respond appropriately to any red flags that are detected to prevent and mitigate identity theft; and
      (4)   Ensure that the program is reviewed periodically, and updated, if necessary, to reflect changes in risks to customers or to the safety and soundness of the village from identity theft.
(Res. 09-02, passed 3-2-2009)