These days, it is almost impossible to be in business and not collect or hold personal identifying information - names and addresses, Social Security numbers, credit card numbers, or other account numbers - about your customers, employees, business partners, students, or patients. If this information falls into the wrong hands, it could put these individuals at risk for identity theft.
Still, not all personal information compromises result in identity theft, and the type of personal information compromised can significantly affect the degree of potential damage. What steps should you take and whom should you contact if personal information is compromised? Although the answers vary from case to case, the following guidance from the Federal Trade Commission (FTC), the nation's consumer protection agency, can help you make smart, sound decisions. Check federal and state laws or regulations for any specific requirements for your business.
Notifying Law Enforcement
Notifying Affected Businesses
Notifying Individuals
For More Information
This article provides general
guidance for an organization that has experienced an
information compromise. If you would like more individualized
guidance, you may contact the FTC at
idt-brt@ftc.gov.
Please provide information regarding what has occurred,
including the type of information taken, the number
of people potentially affected, your contact information,
and contact information for the law enforcement agent
with whom you are working. The FTC can prepare its Consumer
Response Center for calls from the people affected,
help law enforcement with information from its national
victim complaint database, and provide you with additional
guidance as necessary. Because the FTC has a law enforcement
role with respect to information privacy, if you prefer
to seek guidance anonymously, you may do so.
The FTC works for the consumer to provide information on identity theft. To file a complaint or to get free information on ID theft issues, visit www.consumer.gov/idtheft or call toll-free 1-877-IDTHEFT (438-4338). The FTC enters identity theft complaints into the Identity Theft Data Clearinghouse, a secure online database available to law enforcement agencies.
