a. This Program provides for appropriate responses to detected red flags to prevent and mitigate identity theft. The response shall be commensurate with the degree of risk posed. Appropriate responses include:
1. Monitoring - Monitoring a covered account for evidence of identity theft;
2. Customer Contact - Contacting the customer (contact may be made by e-mail, certified mail or telephone to the affected customer);
3. Change Passcodes - Changing any passwords, security codes or other security devices that permit access to a covered account;
4. New Account Number - Reopening a covered account with a new account number;
5. Not Open - Not opening a new covered account;
6. Close - Closing an existing covered account;
7. Notify Law Enforcement - Notifying the Town’s Police Department and any other necessary law enforcement personnel; or
8. Not Respond - Determining that no response is warranted under the particular circumstances.
b. Any utilities staff employee who becomes aware of a suspected or actual fraudulent use of a customer or potential customer’s identity must first and immediately notify the Town Manager and Clerk-Treasurer. The Town Manager and Clerk-Treasurer will then determine the appropriate response in accordance with one (1) or more of the options above.
c. In the event notification to a customer is necessary, such notification shall include relevant information related to the incident including (i) the type of identifying information involved; (ii) the telephone number that the person can call for further information and assistance; (iii) local law enforcement contact information; and (iv) Federal Trade Commission contact information (877-438-4338 or www.consumer.gov/idtheft).
(Ord. No. 1752, § 1, 4-22-09)