The Federal Trade Commission (FTC) began enforcing the so-called “Red Flags Rule” on January 12, 2011. The rule requires “financial institutions” and “creditors” to develop a written identity theft prevention program for “covered accounts.” The definition of “creditor” is broad, so even if you do not consider your business a financial institution, it might apply… [630 word article, January 2011]