Blog

Dodd-Frank transferred responsibility for identity theft from the FTC to the CFTC and SEC for those financial institutions under their jurisdiction. The rules adopted in April 2013 require “financial institutions” that “hold” “covered accounts” to establish an Identity Theft Prevention Program (“ITPP”). These rules are known as the “Red Flag” rules. The CFTC has defined…...