THE RED FLAGS Rule has been all bark and no bite since the federal regulation was published in November 2007. More than two years and four postponements later, the Federal Trade Commission has yet to begin enforcing the identity theft prevention law.The rule requires healthcare providers and others to develop, implement, and monitor identity theft prevention programs. But lobbying, lawsuits, and an act of Congress have postponed the rule's enforcement. The opposition and the delays have many in healthcare wondering what has become of the Red Flags Rule and whether small healthcare providers will remain covered by its requirements.
展开▼