Maryland Attorney General Brian E. Frosh (D) joined 30 other state attorneys general in a letter sent to the Federal Trade Commission Feb. 10 urging the FTC to continue its Identity Theft Rules, originally adopted in November 2007. The letter cites the proliferation of identity theft in many states and the growth in technology since the rules were adopted, according to a state press release.
The current rules require certain financial institutions and businesses that grant credit or issue debit or credit cards to take steps to detect, prevent and mitigate identity theft by implementing reasonable safeguards, according to the press release. In addition to the continuation of these rules, the attorneys general suggest certain modifications to ensure they continue to be relevant and in keeping with technological trends.
The proposed rules modifications include adding a requirement that cardholders must be notified by old and new email or cell phone number if one of these identifying factors is changed, in addition to the existing requirement to mail notification upon change of account address.
Additional suggested modifications include adding account access by new and previously unknown devices and repeated unsuccessful access attempts to a list of examples of suspicious account activity.
“There have been hundreds of millions of personal data records lost or stolen due to data breaches over the last ten years,” Frosh said in the release. “Now is not the time to roll back identity theft protections. Consumers deserve more protection, not less.”
The letter was also signed by attorneys general of Alaska, California, Colorado, Connecticut, District of Columbia, Delaware, Hawaii, Illinois, Iowa, Kentucky, Maine, Massachusetts, Michigan, Minnesota, Missouri, Nebraska, New Jersey, New Mexico, Nevada, North Carolina, Oklahoma, Oregon, Pennsylvania, Rhode Island, Tennessee, Utah, Vermont, Virginia, Washington, and Wisconsin.
