FACTA, Red Flags, HIPAA, FERPA, SSN Privacy Rule, Tort Law, and more are all part of an Identity Theft Prevention Program. There are multiple compliance AND prevention requirements as well. When vicarious liability, the use of experts, "what you should have known" clause , and "actions become policy" are added the risk becomes significant. Learn from experts.