5.7.5.2 FTC Red Flags Rule
The Federal Trade Commission’s (FTC) Red Flags Rule requires broker-dealers, investment advisers, and investment companies to establish and maintain identity theft programs. The programs should detect the warning signs—or red flags—of identity theft in the firm or investment company’s day-to-day operations. Identity theft is the fraudulent acquisition and use of a person’s private identifying information, usually for financial gain. An identity theft program can help businesses spot suspicious patterns and prevent the costly consequences of identity theft. The FTC Red Flags Rule requires that a firm or investment company draft an identity theft program that includes the following basic elements:
• Reasonable policies and procedures to identify the red flags of identity theft that may occur during day-to-day operations. Red flags are suspicious patterns or practices or specific activities that indicate the possibility of identity theft. For example, i