Re: FTC Extends Deadline, Again, For Red Flags Rule Enforcement

[Allison Dolan <adolan () MIT EDU>]

I recommend reading the FAQs (at http://www.ftc.gov/bcp/edu/
microsites/redflagsrule/faqs.shtm) - Item B15 explicitly refers to
universities with student 'debit cards'.  (other higher ed examples
in other questions as well).  There are also reassuring comments
about enforcement where the risk of identity theft is low (E2, E3)


Allison F. Dolan
Program Director, Personally Identifiable Information
Massachusetts Institute of Technology
77 Massachusetts Ave  NE49-3021
Cambridge MA 02139-4307
Phone: (617) 252-1461
http://mit.edu/infoprotect



On Jul 31, 2009, at 12:33 PM, Rodney Petersen wrote:

> (Please excuse the cross-posts)
>
> The FTC has announced that they will delay enforcement of the Red
> Flags rule, once again.  The new deadline is November 1, 2009.
>
> For more information, see http://www.ftc.gov/opa/2009/07/redflag.shtm
>
> Excerpt:
>
> To assist small businesses and other entities, the Federal Trade
> Commission staff will redouble its efforts to educate them about
> compliance with the "Red Flags" Rule and ease compliance by
> providing additional resources and guidance to clarify whether
> businesses are covered by the Rule and what they must do to comply.
> To give creditors and financial institutions more time to review
> this guidance and develop and implement written Identity Theft
> Prevention Programs, the FTC will further delay enforcement of the
> Rule until November 1, 2009.
>
> The FTC also announced the availability of a template for Red Flags
> planning template:  http://www.ftc.gov/bcp/edu/microsites/
> redflagsrule/get-started.shtm
>
> Please let me know if you have any questions.
>
> -Rodney
>
> --------------------------------------------------
> Rodney J. Petersen, J.D.
> Government Relations Officer &
> Director of EDUCAUSE Cybersecurity Initiative
>
> EDUCAUSE
> 1150 18th Street, N.W., Suite 1010
> Washington, D.C. 20036
> (202) 331-5368 / (202) 872-4200
> (202) 872-4318 (FAX)
> EDUCAUSE/Internet2 Security Task Force
> www.educause.edu/security
> --------------------------------------------------