Under the red flag rules, every financial institution and creditor is required to establish an identity theft prevention program tailored to its size, complexity and the nature of its operation. This program is adopted to comply with the red flags rule, in order to identity relevant red flags (as defined below), to detect red flags, to respond appropriately to red flags and to require the program to be periodically updated.
(Res. 2011-04, passed 3-14-2011)