Red Flags Rule Postponed Until November

The Federal Trade Commission (FTC) announced that it would further delay enforcement of the "Red Flags" Rules by another three months, from August 1 to November 1, 2009. The commission also announced that it would be doing more to inform small businesses and other entities about compliance on this issue. The FTC also wants to smooth the way for easier compliance by offering additional resources and guidance to clarify whether businesses are covered and what they must do to comply.

"Although many covered entities have already developed and implemented appropriate, risk-based programs, some—particularly small businesses and entities with a low risk of identity theft—remain uncertain about their obligations," said the FTC in a release. "The additional compliance guidance that the Commission will make available shortly is designed to help them."

The FTC has provided a set of FAQs for the guidelines that address how the agency intends to enforce the Rules, noting that "Commission staff would be unlikely to recommend bringing a law enforcement action if entities know their customers or clients individually, or if they perform services in or around their customers' homes, or if they operate in sectors where identity theft is rare and they have not themselves been the target of identity theft."

The full set of FAQs can be found here.

Thank you to the Mid-America Lumbermen's Association for this updated information.