On August 1, 2009, the FTC began enforcing its so called “Red Flag Rules,” which requires certain businesses, including franchisors, to develop effective programs to identify the warning signs of identity thief.

Franchisors that regularly extend “credit” to their franchisees or arrange financing are subject to the rule. A franchisee may be regarded as a creditor if it defers payments from its franchisees or extents credit or if a franchisor bills a franchisee after providing goods or services. The other way a franchisor would fall under the rule is if it suspects that it may be subject to risk of identity thief. With such broad coverage, most national and regional franchise systems would appear to be subject to this new rule.

If a franchise system is subject to the rule, then it is responsible to develop and put an effective identity theft program into place. The program must be approved by the corporate board of directors or senior management. Failure to comply could result in a franchisor being fined civil penalties.

Although burdensome on franchisors, hopefully this new rule will help curb identity thief, a growing international concern. For more information about the Red Flag Rules, the FTC has published a free plain-language handbook, Fighting Fraud with the Red Flags Rule: A How-To Guide for Business. For a free copy of the guidebook, or for more information about compliance, visit the FTC’s website.

Postscript: With news today of Federal prosecutors charging a Miami man of trying to gain access to 130 million credit and debit card accounts, mostly though hacking into retail networks, it’s difficult to argue against the logic of the Red Flag Rule, despite the obvious burden it places on certain business and franchise enterprises.