Answer:
According to the Federal Trade Commission (FTC) website, the Red Flags Rule applies to "financial institutions" and "creditors" with "covered accounts". A covered account is considered to be an account where there is a "foreseeable risk of identity theft" and would include small business or sole proprietorship accounts. Covered account examples would include small business checking accounts, utility accounts, and credit card accounts.