Commercial Printers Accountable for Identity Theft Protection Under FTC Enforcement of FACTA 'Red Flag Rules'

| From

Identity theft security expert advises printing industry of penalties and legal risks

DENVER, Colo., April 10 (SEND2PRESS NEWSWIRE) -- Commercial printers must provide identity theft protection to their customers under Federal Trade Commission (FTC) enforcement of the "Red Flag Rules" provisions of the Fair and Accurate Credit Transactions Act of 2003 (FACTA), advises identity theft security expert and identity recovery services provider idBUSINESS (

idbusinessAs the nation's consumer protection agency, the FTC is central in the Federal government effort to stem the epidemic spread of identity theft, which it estimates has an impact on nine million individuals annually. According to the FTC ( the Red Flags Rules apply to "financial institutions" and "creditors" with "covered accounts":

A creditor is any entity that regularly extends, renews, or continues credit; any entity that regularly arranges for the extension, renewal, or continuation of credit; or any assignee of an original creditor who is involved in the decision to extend, renew, or continue credit ... A covered account is ... an account for which there is a foreseeable risk of identity theft - for example, small business or sole proprietorship accounts.

"Commercial printers must comply with FTC 'Red Flag Rules' when they defer customer payments, which per the law makes them a creditor, or if they provide services to the target industries such as healthcare, financial services, insurance, and automobile financing," said idBUSINESS president Scott Sax. "Due to the information-rich nature of their services, non-compliant printers risk becoming embroiled in someone else's red flag nightmare."

Under the Red Flags Rules, commercial printers must develop "a written program that identifies and detects the relevant warning signs - or 'red flags' - of identity theft" and "must also describe appropriate responses that would prevent and mitigate the crime and detail a plan to update the program." On top of significant FTC penalties, non-compliant businesses can face state regulators, and can become the target of consumer litigation whether or not information is breached.

"The printing industry is inherently at risk of identity theft-related exposure because of the information we manage on behalf of our customers," said Pacific Printing & Imaging Association ( executive director Jules Van Sant.

Fortunately, Van Sant noted, Pacific Printing and Imaging has always been at the forefront of identity theft protection for its customers due to its early relationship with ID Experts (, and continues to adapt as identity theft criminals devise new strategies. As a leading expert in data breach prevention and remediation, ID Experts works with industry and federal organizations to develop best practices and offer innovative products that address the growing problem of identity theft.

Van Sant cited a 2006 incident in which a Wisconsin business inadvertently printed envelopes with some 170,000 social security numbers due to a computer glitch in a mail merge. At the time, the reprint in and of itself created a substantial loss. Today, they may also have been held liable by the FTC or subject to class action litigation - above and beyond the state of Wisconsin.

"Proactive identity theft protection is a leadership opportunity similar to the environmental-focused FSC certification, for which early adopters reaped competitive benefits. Printers who can demonstrate a strong information security policy and communicate it effectively to their markets will have an advantage," Van Sant said.

An effective "Red Flag Rules" compliance solution reflects real world forensic and information security experiences, meets and exceeds the 26 identity theft "Red Flags" itemized by the legislation, and delivers a more comprehensive set of identity theft triggers, according to idBUSINESS. Printers can expect to begin meeting the requirements of the law within one hour if they select a provider with that capability. Upon satisfying the requirements, the provider should enable printers to download their own custom Red Flag Rules compliance plan.

In addition to commercial printers, businesses that are now required to protect the identity of their customers include: healthcare providers; mortgage lenders; financial planners; auto dealerships; and insurance agents.


idBUSINESS is the standard information security operating system for small- to mid-sized businesses. It provides information security planning tools that identify needs, assess risks, comply with the law, and secure an organization's data.

idBUSINESS is powered by two leading firms in information security, ID Experts, the nation's leader in date breach prevention and remediation services, and Net Reaction, providers of forensics and information security planning products and services.

To learn more, please visit

All trademarks and service marks are the property of the respective parties.

News Source:
Like, Share, Save this press release:
  TWEET   SHARE   G+   STUMBLE   LinkedIn   Instapaper   Buffer

The content of the above press release was provided by the “news source” (idBUSINESS) or authorized agency, who is solely responsible for its accuracy. Send2Press® is the originating wire service for this story and content is Copr. © 2009 idBUSINESS with newswire version Copr. © 2009 Send2Press (a service of Neotrope). All trademarks acknowledged.

Rights granted for reproduction by any legitimate news organization. However, if news is cloned/scraped verbatim, then original attribution must be maintained with link back to this page as “original syndication source.” Resale of this content for commercial purposes is prohibited without a license. Reproduction on any site selling a competitive service is also prohibited. Information is believed accurate, as provided by news source or authorized agency, however is not guaranteed, and you assume all risk for use of any information found herein/hereupon. This work is licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.
STORY READS for this single page only, as of Oct 28 2016:
[ count retired 8.4.16 ]

back to top
REFERENCES: idBUSINESS, Net Reaction, idBUSINESS, information security operating system, ID Experts, forensics and information security planning products and services, Identity theft, Red Flag Rules, FACTA, Federal Trade Commission, Jules Van Sant, S-IND, news, press release from idBUSINESS, Apr 10, 2009, Printing and Packaging, , , , , Commercial Printers Accountable for Identity Theft Protection Under FTC Enforcement of FACTA 'Red Flag Rules'