Skip to main content
Please enter a legal issue and/or a location
Begin typing to search, use arrow keys to navigate, use enter to select

Find a Lawyer

More Options

FTC "Red Flags" Rule Live on Nov 1st: Is Your Small Biz Covered?

By Neetal Parekh on October 26, 2009 | Last updated on March 21, 2019

Nothing says danger like a red flag.  And that likely inspired the Federal Trade Commission (FTC) to name its anti-fraud regulation which requires certain creditors and financial institutions with covered accounts to implement programs to identify, detect, and respond to warning signs--the "Red Flags" Rule. After initial delays, the date the Rule will begin to be enforced is now November 1st, 2009.

The implementation of the Act comes at a time when consumers are growing wary of identification leaks and news stories of data breaches.   According to the FTC, over 9 million Americans are victims of identity theft every year. 

What does the Red Flags Rule require?

Among other things, the Act requires:

  • applicable financial institutions and creditors to develop and implement written Identity Theft Prevention Programs to identify warning signs or "red flags'" of identity theft in daily operations
  • issuers of credit cards and debit cards to assess validity of notifications of changes of address

Who does the Red Flags Rule apply to?

The Rule applies to "financial institutions" and "creditors", with "covered accounts". 

The FTC defines "financial institution" as "a state or national bank, state or federal savings and loan association, mutual savings bank state or federal credit union, or any person that directly or indirectly hold a transaction account belonging to a consumer".

The FTC defines a "creditor" as a "business or organization that regularly defers payment for goods or services or provides goods or services and bills consumers later".  Examples of FTC creditors include utility companies, health care providers, and telecommunication companies, depending on how payment is collected and when.

And last but not least, the FTC chalks out a "covered account" as either a consumer account--one that a business offers to customers that is primarily for personal, family, household purposes that permits multiple payments.  The second kind is "any account that a financial institution or creditor offers or maintains for which there is a reasonably foreseeable risk to consumers or to the safety and soundness of the financial institution or creditor from identify theft."

Check out the resources below to get a better idea of whether your business is in line to comply with the Red Flags Rule, and if so, how it can stay on the good side of the new law.

Related Resources:

You Don’t Have To Solve This on Your Own – Get a Lawyer’s Help

Meeting with a lawyer can help you understand your options and how to best protect your rights. Visit our attorney directory to find a lawyer near you who can help.

Or contact an attorney near you:
Copied to clipboard