Red Flag Rules Training Class SD 428

1. Red Flag RulesTrainingClass SD 428

2. Red Flag Rules SD 428 The Red Flag Rules course (SD 428) was implemented at UTSA to meet the requirements and guidelines put forth by the Federal Trade Commission. 2

3. Red Flag Rules SD 428 In response to the growing threat of Identity theft, the United States Congress passed the Fair and Accurate Credit Transactions Act of 2003 (FACTA). On November 9,2007, the Federal Trade Commission circulated the final rules, know as the “Red Flag Rules”. 3

4. Red Flag Rules SD 428 The University has developed a policy for the identification, detection and prevention of identity theft. The policy is located in the FMOG, Section 2-Red Flag Rules. The FTC also requires users to “train staff, as necessary, to effectively implement the program”. 4

5. Red Flag Rules SD 428 Why Universities? According to the FTC, any business that handles a “covered account” is responsible to follow the Red Flag Rules. What is a Covered account? An account that involves or is designed to permit multiple payments or transactions, which is primarily for personal, family or household purposes. It is also any account for which there is a reasonably foreseeable risk of identity theft. Examples of Covered Accounts include, but are not limited to: Student loan and tuition accounts Patient medical service accounts Accounts associated with employee benefits, student debit cards and meal plans. 5

6. Red Flag Rules SD 428 UTSA departments identified as being responsible for opening -directly or indirectly – covered accounts include. Business Affairs: • Administration: Business Auxiliary Services Operations • Financial Affairs: Financial Services and University Bursar, Perkins Student Loans, Fiscal Services Office • UTSA Police Department Student Affairs: • Admissions • Registrar • Student Enrollment Services Center • Student Financial Aid 6

7. Red Flag Rules SD 428 What are “Red Flags”? Red flags are suspicious patterns or practices, or specific activities that indicate the possibility that identity theft may occur. This may include. • Alerts, notifications or warning from consumer reporting agencies • Suspicious documents • Suspicious personal identifying information • Unusual use of or suspicious activity related to covered accounts. 7

8. Red Flag Rules SD 428 Examples include • Address discrepancy is received in response to a request for a consumer report • ID documents or card that appears to have been altered or forged • ID photograph or physical description is not consistent with the appearance of the customer presenting the documents • Inconsistent birth dates on identifying documents • Social Security Number or Banner ID is the same as submitted by another customer. 8

9. Red Flag Rules SD 428 9

10. Red Flag Rules SD 428 This is a open enrollment course. Any employee with access to the My Training website will be able to take the course. There is a Course Acknowledgment at the end of the course. Training and Development will be sending out notices to current employees in the identified departments once the course is available. New employees will also be required to take the course. 10

11. Questions 11