APS #7010

Proposed

Red Flag Identity Theft Prevention Program

Brief Description

This administrative policy statement (APS) aligns the University of Colorado Red Flag 4 Identify Theft Prevention Program and sets forth requirements for management of personal 5 financial data, collected in the normal course of business, to help protect members of the 6 University of Colorado community from damages related to identity theft.

Reason for Policy

This APS aligns requirements to detect, prevent, and mitigate the risk of identity theft in connection with 18 sensitive financial account data, and serves as the university’s Red Flag Identity Theft Prevention Program. The program sets 19 parameters that must be followed by organizational units with responsibilities for collecting and managing financial account 20 data when conducting business with students, employees, and other customers of the University of Colorado, and to provide for 21 continuous compliance with federal law and regulations, specifically the Federal Trade Commission’s Red Flags Rule, which 22 implements Section 114 of the Fair and Accurate Credit Transaction Act of 2003 and serves as the university’s Identity Theft 23 Prevention Program.

Policy Profile

APS Policy Title: 
Red Flag Identity Theft Prevention Program
APS Number: 
7010
Proposed Effective Date: 
July 1, 2025
Approved By: 
Pending
Responsible University Officer: 
TBD
Responsible Office: 
TBD
Policy Contact: 
TBD
Supersedes: 
N/A
Applies to: 
All campuses, including CU System Administration

IN PROGRESS -  SEE DRAFT LINK ABOVE