Admin Order 21-09-06 - Laserfiche WebLink

Home Browse Search

7. The City is notified of unauthorized charges or transactions in connection with a customer's covered account. (e) Notice from Customers Victims of Identity Theft, Law Enforcement Authorities, or Other Persons Regarding Possible Identity Theft in Connection With Covered Accounts Held by the Financial Institution or Creditor. The City is notified by a customer, a victim of identity theft, a law enforcement authority, or any other person that the City has opened a fraudulent account for a person engaged in identity theft. (4) Detection of Red Flays. (a) To facilitate detection of the Red Flags noted in section 3 of this program in connection with the opening of a new covered account, city staff will take the following steps to attempt to verify the identity of the person opening the covered account: 1. Request certain identifying information such as: a. .Name, date of birth, social security number, drivers license number, residential or business address (current and/or previous), documentation showing the existence of a business entity and address of principal place of business, or other similar identification; b. Review the documentation provided for Red Flags. (b) To facilitate the detection of Red Flags in connection with an existing account, city staff will take the following steps: 1. Attempt to verify the identity of customers if they request information related to the covered account; 2. Attempt to verify the validity of requests for address changes or other information related to the covered account; 3. Attempt to verify changes in information for payment purposes. (5) Prevention and Mitigation of Identity Theft. (a) The City Manager or designee will take the following steps to protect personal information: 1. Require that any website or computer program used for storing or processing personal information is secure or provide clear and obvious notice that the website or program is not secure; 2. Require that office computers are password protected; 3. Require that when not needed for work purposes, documents containing personal information be stored in a secure location; 4. Require that computer virus protection is up to date; 5. Provide training for employees on identity theft protection issues; and 6. Dispose of personal information once it is no longer needed by redacting or destroying any physical records and by erasing electronic media so that the personal information cannot be read or reconstructed. Any document redaction or destruction shall be undertaken in accordance with state law and the City's record retention policies. Administrative Order -- Page 5 of 7