Memos

The University is required to adopt an Identity Theft Prevention Program in compliance with "Red Flags" rules issued by the Federal Trade Commission pursuant to the Fair and Accurate Credit Transactions Act (FACTA). The FTC enforcement date is November 1, 2009.

The Lawrence/Edwards Campus policy on the Identity Theft Prevention Program, available at https://documents.ku.edu/policies/provost/IDTheftPrevention.htm, tracks very closely with the language of the FTC rules. It was developed by staff in my office, the University Privacy Officer, Jane Rosenthal, and the Office of the General Counsel in consultation with units that are most likely to be affected by the program. Please note that while we have identified several units that are required to comply with this policy, all unit heads are required to review the policy and determine whether they are required to participate. Annual reports to the Privacy Office will be required.

I will serve as program administrator. Jeanne Rooney of my office and Jane Rosenthal have developed the necessary training materials and Jane will be responsible for establishing processes for identifying, preventing, and mitigating identity theft. If you have questions, please contact Jeanne (jmrooney@ku.edu), Jane (privacy@ku.edu), or me (dgoddard@ku.edu).

Thank you.