Businesses May Receive Stiff Penalties and Fines For Non-Compliance!

These days, it is almost impossible to be in businessBusinesses must exercise appropriate and effective
and not collect or hold personally identifyingoversight of service provider arrangements.o Service
information - names and addresses, Social Securityproviders and contractors must comply by
numbers, credit card numbers, or other accountimplementing reasonable policies and procedures
numbers - about your customers, employees,designed to detect, and mitigate the risk of identity
business partners, students, or patients. If thistheft
information falls into the wrong hands, it could putFair Credit Reporting Act (FCRA)
these individuals at risk for identity theft. Accordingly,If an Employer obtains, requests or utilizes consumer
for any company that maintains information onreports or investigative consumer reports for hiring
employees or customers - information that couldpurposes/background screening, then the Employer is
provide the basis for identity theft - it is critical tosubject to FCRA requirements.
understand the problem of identity theft and to begin(OTHER SIDE)
to take steps to reduce these risks now, as much asGramm, Leach, Bliley Safeguard Rules
possible. There are federal and state laws requiringEight Federal Agencies and any State can enforce
business owners to secure all personal informationthis law
(Social Security numbers, driver's license numbers,Applies To Any Organization That Maintains Personal
credit card numbers, date of birth, etc.) of theirFinancial Information Regarding Its Clients Or
clients and employees. Some 87 percent ofCustomers
businesses are not aware that these laws effectNon Public Information (NPI) lost under the wrong set
them or that they even exist. Non-compliance couldof circumstances may result in:o Fines up to
result in the closing of the business, large fines and$1,000,000 per occurrenceo Up to 10 Years Jail Time
penalties, and criminal and civil litigation. No industry isfor Executiveso Removal of managemento
immune, and businesses large and small, for profit andExecutives within an organization can be held
non-profit are impacted. It is expected to be theaccountable for non-compliance both civilly and
next hot class action target.criminally
Fair and Accurate Credit Transactions Act (FACTA)How We Help! We specialize in Identity Theft. As
Applies To Every Business And Individual WhoIdentity Theft Risk Management Specialist we:o Set
Maintains, Or Otherwise Possesses, Consumerup reasonable steps to protect Non Public
Information For A Business Purpose.Information (NPI) and Personally Identifiable
Employee or Customer information lost under theInformation (PII). We provide a written policy manual
wrong set of circumstances may cost yourregarding NPI.o Help create a "Culture of Security" by
company:o Federal and State Fines of $2500 perproviding the required training.o Set up a potential
occurrenceo Civil Liability of $1000 per occurrenceoAffirmative Defense with an Identity Theft
Class action Lawsuits with no statutory limitationoPrevention Program that is offered to you and your
Responsible for actual losses of Individual ($92,893employees.o Help Protect employees and customers
Avg.)while potentially decreasing your company exposure.
FACTA-Identity Theft Red Flag RulesWe Train your employees about the written policy
Businesses should establish an identity theftand provide documentation of training.
prevention programo Should develop and implement aWe start the compliance process for your company
written Identity Theft Prevention Program.by providing templates for the written ID Theft
Training of staff to implement the identity theftsecurity plan and the appointment of the security
prevention programo A Culture of Security should beofficer.
established at all businesses.o Personally IdentifiableTo assist your company with compliance issues we
Information (PII) such as Social Security numbers,will conduct a mandatory training required by law for
drivers license numbers, etc., must be protected as ifyour employees. We will also explain the different
they were loose cash because the loss of PII can betypes of ID Theft and show your employees how
more devastating then the loss of cash, since cashthey can protect themselves if they become a victim
can be replaced.o All staff who could possibly haveand why their and your customers' personal
access to PII within or without the business shouldinformation needs to be protected.
be trained so that they understand why theWe also help with your business's " bottom line",
information needs to be protected and that therecaused by worker absenteeism. Individuals spend an
are legal consequences for not doing it. This isaverage of 600 hours trying to clean up the mess
necessary to effectively implement an identity theftafter be a victim of identity theft. At what times do
prevention program.you think victims spend those 600 hours trying to fix
Service providers and sub contractorso Liabilitytheir problem?
follows the data.o A covered entity cannot escapeWe do all of this at no direct cost to your company.
its obligation to comply by outsourcing an activity.o