214.06   POLICY ADMINISTRATION.
   Adoption and revision of this identity theft prevention policy is council's responsibility. Implementation of the policy shall be the responsibility of the Chief of Police.
   (a)   Training.
      (1)   Training shall be conducted for all village personnel and service providers who may come into contact with covered accounts or sensitive information.
      (2)   The Chief of Police shall be responsible for all such training.
      (3)   Employees shall receive annual training in all elements of this policy, and additional training as changes to the policy are made.
   (b)   Service provider compliance.
      (1)   Each service provider shall be provided with a copy of this chapter if the provider has not previously received a copy of same. By continuing its relationship with the village, the service provider shall be conclusively presumed to have agreed to comply with and be bound by this identity theft prevention policy.
      (2)   A service provider that maintains its own identity theft prevention policy, consistent with the guidance of the red flag rules and validated by appropriate due diligence, may be considered to meet these requirements.
      (3)   Specific requirements pertinent to each service provider shall be specifically addressed in the contract documents between said provider and the village.
(Ord. 08-11-02.  Passed 1-13-09.)