To the extent applicable to the Department by law, the Director has developed an identity theft prevention program pursuant to the Federal Trade Commission's Red Flags Rule, which implements Section 114 of the Fair and Accurate Credit Transactions Act of 2003 and tailored to the Department's size, complexity and the nature of its operations. The program contains reasonable policies and procedures to: (1) identify relevant Red Flags for new and existing covered accounts (as defined in the Red Flags Rule) and incorporate those Red Flags into the program; (2) detect Red Flags that have been incorporated into the program; (3) respond appropriately to any Red Flags that are detected to mitigate or prevent identity theft; and (4) ensure the program is updated periodically.