08-1952 Identity Theft Detection and Prevention Program

Home Browse Search

7. Breach in the City's computer system security; and 8. Unauthorized access to or use of customer account information. D. Alerts from Others Red Flae:s I. Notice to the City from a customer, identity theft victim, law enforcement or other person that it has opened or is maintaining a fraudulent account for a person engaged in Identity Theft. Detecting Red Flags A. New Accounts In order to detect any of the Red Flags identified above associated with the opening of a new account, City personnel will take the following steps to obtain and verify the identity of the person opening the account: Detect I. Require certain identifying information such as name, date of birth, residential or business address, principal place of business for an entity, driver's license or other identification; 2. Verify the customer's identity (for instance, review a driver's license or other identification card); 3. Review documentation showing the existence of a business entity; and 4. Independently contact the customer. B. Existing Accounts Detect I. Verify the identification of customers if they request information (in person, via telephone, via facsimile, via email); 2. Verify the validity ofrequests to change billing addresses; and 3. Verify changes in banking information given for billing and payment purposes. Preventing and Mitigating Identity Theft In the event City personnel detect any identified Red Flags, such personnel shall take one or more of the following steps, depending on the degree of risk posed by the Red Flag: Prevent and Mitie:ate 1. Continue to monitor an account for evidence of Identity Theft; 2. Contact the customer; 3. Change any passwords or other security devices that permit access to accounts; 4. Not open a new account; 5. Close an existing account; 6. Reopen an account with a new number; 7. Notify the Program Administrator for determination of the appropriate step(s) to take;