The regulations require an Identity Theft Prevention program. The regulations also clarify that existing policies and procedures may be incorporated into the Program, as appropriate. The regulations do not provide that the Program can be incorporated into a different policy or procedure.
About a Separate Identity Theft Prevention Program
Please clarify separate identity theft prevention program; can't it be incorporated into the bank's GLBA Information Security Program?
First published on 10/22/2008