29.03.2015 Views

regulatory and compliance issues and considerations

regulatory and compliance issues and considerations

regulatory and compliance issues and considerations

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

A Review of ‘Red Flags’ <strong>and</strong> what Documentation may<br />

Leave your Credit Union Open to Liability<br />

RED FLAGS<br />

• Effects both Operations <strong>and</strong> Lending<br />

• New program for detecting, prevention, <strong>and</strong> mitigation of ID Theft on a<br />

covered account.<br />

• New address change procedures.<br />

• Detailed steps to take if a Red Flag appears prior to opening an account.<br />

• What to do if someone asks for a replacement card following an address<br />

change.<br />

Step One<br />

Step Two<br />

Step Three<br />

Step Four<br />

Step Five<br />

Step Six<br />

Underst<strong>and</strong>ing<br />

Red Flags <strong>and</strong> Information Security Assessment Checklist<br />

A Complete FCRA Policy – (Not Required – However -- we do not believe it<br />

is good practice to address a law in separate parts)<br />

Detailed Incident Response Policy/Procedures – intended to work h<strong>and</strong>-inh<strong>and</strong><br />

with ID Theft <strong>and</strong> Red Flags Procedures –<br />

Detailed ID Theft <strong>and</strong> Red Flag Procedures<br />

Internal Credit Union Use - ID Theft Affidavit<br />

Step Seven Initial Board Adoption of Red Flags Assessment <strong>and</strong> Policy -- With the<br />

potential liability that can attach to the Credit Union’s Senior Management<br />

<strong>and</strong> Volunteers We have drafted this from a Legal Perspective to Provide a<br />

Level of Protection from Claims that we recommend to all Credit Union<br />

Clients.<br />

Step Eight Periodic Board Re-Assessment <strong>and</strong> Approval of Red Flags Policy // As with<br />

the initial Approval -- the potential liability that can attach to the Credit<br />

Union’s Senior Management <strong>and</strong> Volunteers We have drafted this from a<br />

Legal Perspective to Provide a Level of Protection from Claims that we<br />

recommend to all Credit Union Clients.<br />

Step Nine Possible ID Theft Investigation Form // A Credit Union may find its<br />

assessment of a possible Red Flags/ID Theft Matter being used as a Tool<br />

Against the Credit Union. Example – you suspected but chose not to act;<br />

<strong>and</strong> now some member sues claiming your assessment was negligent <strong>and</strong> if<br />

you would have acted – they would not have been insured (a classical<br />

negligence claim). This form is drafted to provide protections from such<br />

claims <strong>and</strong> is recommended to all Credit Union clients.<br />

Step Ten Initial Training -- Train Everyone as Applicable <strong>and</strong> document this. –<br />

Front Line Staff<br />

Security Officer(s)<br />

Copyright©1994-2010 by Credit Union Resources & Educational Services, LLC. All rights reserved.<br />

Revised February 2010<br />

27

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!