Déjà Vu? FTC Delays Red Flags Rule Enforcement for the 5th Time

June 2, 2010 at 8:41 pm Leave a comment

At the request of members of Congress, the Federal Trade Commission (FTC) announced on May 28, 2010 that it would, for the fifth time, delay enforcement of the Identity Theft Red Flags Rule (the Rule).  This time, the enforcement date has been pushed back until December 31, 2010.  This delay gives Congress time to act on recently introduced legislation that would exempt healthcare, accounting and legal practices with 20 or fewer employees from compliance with the Rule.

Developed under the Fair and Accurate Credit Transaction Act of 2003, the Rule has already been enforced by banking regulators for most financial institutions since November, 2008.  The FTC has interpreted enforcement of the Rule as having a surprisingly wide application for the non-financial institution businesses that it regulates.  Under the FTC’s interpretation, any business that bills customers after providing goods or services is a “creditor” subject to the Rule. This includes many health care providers, construction companies and other merchants and service providers.  If such “creditors” have “covered accounts” (as defined in the Rule), they must adopt an identity theft prevention program. That program must be designed to identify, detect, and respond to patterns, practices, or specific activities – known as “red flags” – that might indicate identity theft.

It is precisely the wide scope of the FTC’s interpretation of the Rule which has caused the delays.  Initially, many business did not believe the Rule applied to them.  After the FTC opined that many service providers, including attorneys and health care providers, would be subject to the Rule, industry trade associations have attempted to limit the application of the Rule through various forums.  On October 29, 2009, the American Bar Association secured a decision in federal district court that the Rule does not apply to lawyers, which the FTC is appealing.  More recently, in May 2010, the American Medical Association, along with the American Osteopathic Association and the Medical Society of the District of Columbia,  filed a lawsuit against the FTC to prevent application of the Rule to physicians after unsuccessfully petitioning the FTC to reconsider its broad interpretation of the Rule.  That lawsuit is still pending.

A full copy of the FTC’s May 28, 2010 press release is available here.

Entry filed under: Small Business/SBA/Community Banks.

OTS Cracks Down on Overdraft Practices, Proposes New Guidance Final Guidance on Incentive Compensation Includes Small Banks

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

Trackback this post  |  Subscribe to the comments via RSS Feed

Enter your email address to follow this blog and receive notifications of new posts by email.

Produced & Maintained By

Stinson Leonard Street Logo


A legal resource for Banking & Financial Services


%d bloggers like this: