INSTITUTE OF INTERNAL AUDITORS
April 10, 2013

“You Know Who You Are and
So Do I”





Chris M. Wright, CPP
THE WRIGHT GROUP
cwright@thewrightgroup.com

Defining Privacy Issues
“You already have zero privacy...
get over it!”
Scott McNealy,
CEO Sun Microsystems

Defining Privacy Issues
February 2013 survey of privacy concerns by Harris Interactive on behalf of TRUSTe revealed:

90% of Americans are concerned about the loss of their privacy, primarily through use of the Internet


http://www.adweek.com/news/technology/divorcees-southerners-most-concerned-about-web-privacy-138185

Defining Privacy Issues

57% favor laws March 2000 Business Week/Harris Poll

83% have asked for their names to be removed. February 2002 Harris Poll,

70% refuse to give information

85% of respondents said their personal information is important to to them as consumers. UPI-Zogby International Poll: Most Americans Worry About Identity Theft . Zogby, April 03, 2007.

Information collection points

WHAT IS IDENTITY THEFT?
The unauthorized use of personal, identifying information to obtain credit, goods, services, or medical information in the name of another person.

What is the BIGGEST Problem?

WHO ARE WE?

Purpose of Identity Theft
Take over financial accounts

Open new accounts

Apply for loans

Apply for credit cards

Apply for social security benefits

Purchase property (autos, etc.)

Rent property

Establish services
Phone
utilities

HOW DO THIEVES OBTAIN MY INFORMATION?

Impersonating you and filing an address change with the Post Office

Obtaining your credit report fraudulently

Accessing computerized records

Privacy Matters
Shred you receipts and any credit card applications.

Check you credit history once a year.

Ensure your creditors have your phone number.

Pretext Calling
Policy on cold calls

Code word

Check your credit history

Train your family
I’m smiling because I have a code word. If I can just remember what it is…

WHY IS IT SO HARD TO GET HELP?
Not geared to helping people, geared to the bottom line

Protected from large out-of-pocket financial losses

Companies have already lost a lot of money

Apathy

WHY IS IT SO HARD TO GET HELP?
We are not customers for the credit bureaus, therefore, most need to please the credit grantors, who spend millions of dollars to order our information from them.

Until October 1999, no single organization has been primarily responsible for fostering protection of your privacy. The Federal Trade Commission (FTC).

WHY IS IT SO HARD TO GET HELP?
Office of Consumer Affairs in your state and in Washington D.C. may exert some influence but they lack regulatory power.

Local Police Department fraud unit will only deal with the criminal aspects.

BUT STILL, YOU HAVE RIGHTS
AND OPTIONS


Identity Theft Deterrence Act

Fair Credit Reporting Act (FCRA)

The Fair Credit Reporting Act guarantees:
You must be told if information in your files has been used against you.
You can find out what’s in your file
You can dispute inaccurate information
Inaccurate information must be corrected or deleted
Access to your file is limited

I KNOW I’M A VICITIM.
WHAT DO I DO?
Alert your creditors in writing

Report the Crime to Police or the Secret Service within 24 hours.

800-680-7289
www.tuc.com


800-525-6285
www.equifax.com


888-397-3742
www.experian.com

Write

Re-Assert Control

Don’t Pay

New ATM Card

Mail

Alert your Public Utilities

Contact the Secret Service

Notify Social Security

Check on your Passport

Protect your phone card

Change your Driver’s License Number

Contact your Auto Insurer, if needed

Clear Your Name in the Courts

Consider getting legal assistance

Take care of yourself

Seek change in legislation

NEVER GIVE UP...NEVER QUIT...
NEVER LET IT HAPPEN AGAIN

TAKE BACK YOUR NAME,
YOUR MONEY
AND YOUR LIFE!

Questions?
Chris M. Wright
www.thewrightgroup.com
chris@thewrightgroup.com
714-687-1190

BREAK!

Personal Precautions
Discarding and Protecting personal Information

Personal Precautions
Discarding and Protecting personal Information
POP QUIZ…What are you doing with my personal information?
Financial Records

Guarding your information in public places
2222 Harbor St.
Apt 22
Anaheim, CA
922-222-2222

Susie Smith
Beware
Memorize passwords
Carry little information
Don’t use ss# as ID
Beware of shoulder surfers

Dealing with Credit Cards
Monitor credit card statements closely

Never provide personal information over the phone

Never carelessly discard pre-approved credit card
applications

Always remove receipts and carbons when using ATM’s
or Point of Sale Terminal Readers

Promptly remove mail from your mailbox

Be aware of your credit card expiration dates

Do not give out your credit card account number to
telemarketers

Change your address promptly with you issuers when you move

Protecting your checks
TWG/601
Protect your purse or wallet at all times

Don’t pre-print

Fold check into another piece of paper when mailing bills

When ordering new checks, have them
delivered to your local branch, not your
home.

Don’t give your checking account number to
people you don’t know.

Take precautions against illegitimate access

Protecting information by phone
Never give out any personal information over the phone to someone you don’t know


Never give confidential or financial information on a cellular or cordless phone


Put your name on the DO NOT CALL list www.donotcall.gov

Protecting your mail
Do not put checks in the mail from your
home mailbox

Get a post office or a locked residential
mailbox

Use security envelopes and tamper-proof mailers

Opt out
Direct Marketing Association:
www.the-dma.org

Direct Deposit

Dealing with credit reporting agencies (CRA’s)
Order you credit report from all three major credit reporting agencies at least twice a year.


IMMEDIATELY correct all mistakes


Opt out of credit card pre-approved
offers: 888-567-8688

Block your name from marketing lists
Opt out of unsolicited credit and insurance offers

Direct Marketing Association
Mail Preference Service
P.O. Box 9008
Farmingdale, NY 11735

Direct Marketing Association
Telephone Preference Association
P.O. Box 9014
Farmingdale, NY 11735

Internet Protection
log-in security

Install Firewall

Tell your Internet service provider that your personal information is not for sale

Don’t register when visiting websites on the internet unless you are comfortable with their privacy policies

Erase your name from Internet online directories

Internet Protection
Opt out

Keep personal or family information off the Internet.

Don’t give out your Internet account password to anyone

Don’t trust people you meet on-line.

Teach your children never to give personal information on the Internet about any family member.

Protection in the Workplace
Have strict audit procedures and periodic check-review policies. Make sure your company does criminal and civil background checks before hiring employees---even if they’re part time

Personal information about all employees in locked cabinets.
Have data procedures for those who have access to the files

Protection in the workplace
3. Limit the use of personal identifiers

4. All personal and confidential information on computers should be encrypted

5. Put photos on business cards for identification

6. Have a proven method of dispensing of personal information.

Protection in the workplace
7. Train designated staff about security procedures in sending sensitive personal information by fax

8. No one should leave or send person, confidential or sensitive information by voice-mail, cell phones, pagers, answering machines, or email at any time

9. Designated, secure printers and copiers should be used for confidential information

10. Have a written privacy protection policy that covers all persons within the organization and applies to dealings with persons outside the organization

Questions?
Chris M. Wright, CPP

chris@thewrightgroup.com

www.thewrightgroup.com

(714) 687-1190