Red Flag Rules
Training Class SD 428
Red Flag Rules SD 428
The Red Flag Rules course (SD 428) was
implemented at UTSA to meet the
requirements and guidelines put forth by the
Federal Trade Commission.
2
Red Flag Rules SD 428
In response to the growing threat of Identity
theft, the United States Congress passed the
Fair and Accurate Credit Transactions Act of
2003 (FACTA).
On November 9,2007, the Federal Trade
Commission circulated the final rules, know
as the “Red Flag Rules”.
3
Red Flag Rules SD 428
The University has developed a policy for the
identification, detection and prevention of
identity theft. The policy is located in the
FMOG, Section 2-Red Flag Rules.
The FTC also requires users to “train staff, as
necessary, to effectively implement the
program”.
4
Red Flag Rules SD 428
Why Universities?
According to the FTC, any business that handles a “covered account”
is responsible to follow the Red Flag Rules.
What is a Covered account?
An account that involves or is designed to permit multiple payments or transactions, which
is primarily for personal, family or household purposes. It is also any account for which
there is a reasonably foreseeable risk of identity theft.
Examples of Covered Accounts include, but are not limited to:
 Student loan and tuition accounts
 Patient medical service accounts
 Accounts associated with employee benefits, student debit cards and meal plans.
5
Red Flag Rules SD 428
UTSA departments identified as being responsible for opening -directly or
indirectly – covered accounts include.
Business Affairs:
 Administration: Business Auxiliary Services Operations
 Financial Affairs: Financial Services and University Bursar, Perkins Student Loans,
Fiscal Services Office
 UTSA Police Department
Student Affairs:
 Admissions
 Registrar
 Student Enrollment Services Center
 Student Financial Aid
6
Red Flag Rules SD 428
What are “Red Flags”?
Red flags are suspicious patterns or practices, or specific
activities that indicate the possibility that identity theft
may occur. This may include.
 Alerts, notifications or warning from consumer
reporting agencies
 Suspicious documents
 Suspicious personal identifying information
 Unusual use of or suspicious activity related to covered
accounts.
7
Red Flag Rules SD 428





Examples include
Address discrepancy is received in response to a request
for a consumer report
ID documents or card that appears to have been altered
or forged
ID photograph or physical description is not consistent
with the appearance of the customer presenting the
documents
Inconsistent birth dates on identifying documents
Social Security Number or Banner ID is the same as
submitted by another customer.
8
Red Flag Rules SD 428
9
Red Flag Rules SD 428
This is a open enrollment course. Any employee with access
to the My Training website will be able to take the course.
There is a Course Acknowledgment at the end of the course.
Training and Development will be sending out notices to
current employees in the identified departments once the
course is available.
New employees will also be required to take the course.
10
Questions
11