|
|
FACTA Identity Theft Legislation and Compliance
Cellular International is in compliance with the new (FACTA), The Fair and Accurate Credit Transaction Act. These rules called “The Red Flag Rules”, became effective January 1, 2008. Companies must demonstrate full compliance by November 1, 2008. Under these rules, the following steps have been completed by our company.
- We have a written privacy and security program.
- We maintain approval of the initial written program from our board of directors, and have appointed a company executive to oversee these issues.
- The collection, management, and deletion of customer’s information procedures are in place and operating currently under guidelines provided by the FTC.
- The oversight, development, implementation, and administration of the program is performed by an employee at the level of senior management.
The rules set by Cellular International also provide covered accounts, creditors, businesses and their service providers and subcontractors, so as they also comply and have reasonable policies and procedures in place. We have requested:
- They have complied with the process of what follows customer’s data.
- A covered entity must not escape its obligation to comply by outsourcing an activity. Businesses must exercise appropriate and effective oversight of service provider arrangements.
- Service providers and contractors must comply by implementing reasonable policies and procedures designed to detect, prevent and mitigate the risk of identity theft.
- Contractors with whom the covered accounts exchange PII are required to comply and have reasonable policies and procedures in place to protect information.
“We will act against businesses or individuals that fail to protect, or provide false data. We need to see that you’ve taken reasonable steps to protect your data as well. We guarantee our company will protect your information as outlined by the FTC”.
Cellular International.com, LLC.
*Link to full text: http://www.ftc.gov/os/2007/10/r611019redflagsfrn.pdf
|