412 Detection of and Response to Identity Theft Red Flags

理由是:  365英国上市官网 (University) shall comply with the applicable requirements of 16 C.F.R. 681, 由联邦贸易委员会(FTC)颁布的一项联邦法规，作为2003年公平准确信贷交易(FACT)法案的一部分，要求金融机构和债权人实施书面程序，提供对可能与身份盗窃有关的特定活动(红旗)的检测和响应.

政策:  The University will implement and provide for the continued administration of programs in relation to:

1. Duties of users regarding address discrepancies.
 
2. Duties regarding the detection, 防止ion, and mitigation of Identity Theft.
 
3. Duties of Card Issuers regarding changes of address.

适用范围及适用性:  This policy is applicable to all University faculty and staff.

定义:  

帐户:  个人与金融机构或债权人为获得个人产品或服务而建立的持续关系, 家庭, 家庭或商业用途. 账户包括:

i.  延长贷款期限, such as the purchase of property or services involving a deferred payment; and
 
ii.  定期存款帐户.

i.  Credit or insurance to be used 主要是为了个人, 家庭, 或者家庭用途;
 
ii.  Employment purposes; or
 
3.  Any other purpose authorized under US Code: Title 15, 1681b.

i.  An Account that a financial institution or Creditor offers or maintains, 主要是为了个人, 家庭, 或者家庭用途, that involves or is designed to permit multiple payments or transactions, 比如信用卡账户, 抵押贷款, 汽车贷款, 保证金帐户, 手机账户, 公用账户, 支票账户, or savings Account; and
 
ii.  金融机构或债权人提供或维护的任何其他账户，其对客户或金融机构或债权人的安全与稳健存在合理可预见的身份盗窃风险, 包括金融, 操作, 合规, 声誉, 或者诉讼风险.

程序: 

Duties of Users Regarding Address Discrepancies

A.  使用消费者报告的大学院系在收到地址不符通知时，会合理地相信该消费者报告与要求报告的消费者有关:

i.  将消费者报告机构提供的消费者报告中的信息与部门提供的信息进行比较:

1.  保存在自己的记录中, 例如应用程序, 更改地址通知, other Customer Account records; or

2.  Obtains from third-party sources; or

ii.  Verifying the information in the consumer report provided by the Consumer Reporting Agency with the consumer.

i.  Can form a reasonable belief that the consumer report relates to the consumer about whom the user requested the report;

ii.  Established a continuing relationship with the consumer; and

3.  在正常业务过程中，定期向消费者报告机构提供信息，从该机构获得与消费者有关的地址差异通知.

iv.  The department may reasonably confirm an address is accurate by:

1.  Verifying the address with the consumer about whom it has requested the report;

2.  Reviewing its own records to verify the address of the consumer;

3.  Verifying the address through third-party sources; or

4.  其他合理方式.

v.  如果适用的话, 部门将向消费者报告机构提供其合理确认无误的消费者地址，作为其在与消费者建立关系的报告期内定期提供的信息的一部分.

i.  The methods it provides to open its Accounts;

ii.  The methods it provides to access its Accounts; and

3.  Its previous experiences with Identity Theft.

i.  Identify relevant Red Flags for the Covered Accounts that the department offers or maintains, and incorporate those Red Flags into its Program;

ii.  Detect Red Flags that have been incorporated into the Program of the department;

3.  Respond appropriately to any Red Flags that are detected to 防止 and mitigate Identity Theft; and

i.  Involve the President and/or his designees, 在监督发展中, implementation and administration of the Program;

ii.  Train staff, as necessary, to effectively implement the Program; and

3.  Exercise appropriate and effective oversight of Service Provider arrangements.

iv.  Consider guidelines included in Appendix A of 16 C.F.R. 681 and include in its Program those guidelines that are appropriate.

i.  通知持卡人有关申请:

1.  At the cardholder’s former address; or

2.  By any other means of communication that the Card Issuer and the cardholder have previously agreed to use; and

ii.  Provides to the cardholder a reasonable means of promptly reporting incorrect address changes; or

1.  Otherwise assesses the validity of the change of address by reasonable means

B.  部门可以在收到地址变更通知后，在收到额外或更换卡的请求之前，通过验证地址来满足前一节的要求.  本署根据上款发出的任何书面或电子通知，应清晰显眼，并应与本署与持卡人的往来信件分开发出.

遵守法律

根据本政策实施的所有项目必须符合法律和大学政策法规，并符合大学总法律顾问的法律标准和要求.

RED FLAG Identity Theft Protection Program

按照规定, 该大学创建了一个红旗身份盗窃保护计划，其中包括在线培训和培训内容的简短考试.  金融 & Administration strongly recommends that all employees review the training materials and take the exam on an annual basis.

相关政策及表格:    

防止身份盗窃计划:请使用NetID及密码登入.  If you have never accessed the training before, enter the code "Enrollme" (case-sensitive) when prompted for the Enrollment key to access the training and test. 

附录: