This blog article helps you understand whether your business is legally required to design an identity theft prevention program for the US to comply with the Fair Credit Reporting Act: Identity Theft Rules (a.k.a. FTC Red Flag Rules).