[HISTORY: Adopted by the Town Board of the Town of Vernon 12-6-2012 by Ord. No.
2012-05. Amendments noted where applicable.]
This program is established in order to comply with Ch. 19,
Subchapter IV, Wis. Stats., and, to the extent applicable, the federal
Fair and Accurate Credit Transactions Act of 2003. This program is
intended to establish reasonable policies and procedures to:
A.
Develop rules of conduct for Town officials and employees who are
involved in collecting, maintaining, using, providing access to, sharing
or archiving personally identifiable information;
B.
Ensure that Town officials and employees know their duties and responsibilities
relating to protecting personal privacy, including applicable state
and federal laws;
C.
Identify relevant indications that an identity theft is being perpetrated
("red flags") for new and existing covered accounts, and incorporate
those red flags into the program;
D.
Detect red flags that have been incorporated into the program;
E.
Respond appropriately to any red flags that are detected to prevent
and mitigate identity theft; and
F.
Update the program periodically to reflect changes in risks to customers
or to the safety and soundness of the City from identity theft.
Employees at the Town shall observe the following rules of conduct
concerning personally identifiable information. These rules shall
apply to any information that identifies a specific person by address,
telephone number, social security number, date of birth, government
passport number, employer or taxpayer identification number, e-mail
address or unique electronic identification number. Personally identifiable
information does not include a person's name for purposes of
this rule.
A.
Agendas and minutes. Except when deemed reasonably necessary to apprise
the public of the subject of a meeting or actions taken, personally
identifiable information shall not be shown on meeting agendas or
in meeting minutes.
B.
Internal distribution. Except when deemed reasonably necessary to
advise public officials, Town staff, employees or agents, personally
identifiable information shall not be distributed internally.
C.
External disclosures. Except as required by the Wisconsin public
records laws or other applicable laws, personally identifiable information
shall not be released in response to public records requests.
D.
Public information. Except when deemed reasonably necessary to properly
advise the public, personally identifiable information shall not be
disclosed on the Town's website, in the Town's newsletter,
or in other public information materials prepared and provided by
the Town.
Town officials and employees shall check for red flags as indicators
of possible identity theft. Such red flags may include:
A.
Alerts from consumer reporting agencies, fraud detection agencies
or service providers.
B.
Documents provided for identification that appear to be altered or
forged.
C.
Applications that appear to have been altered or forged, or appear
to have been destroyed and reassembled.
D.
Applications that appear to include a fictitious mailing address,
mail drop addresses, jail addresses, invalid phone numbers, page numbers
or answering services.
E.
A social security number provided that is the same as one submitted
by other applicants or customers.
F.
An applicant or customer that fails to provide all required personal
identifying information on an application or in response to notification
that the application is incomplete.
G.
Personal identifying information is not consistent with personal
identifying information that is on file.
H.
Mail sent to a person is returned repeatedly as undeliverable although
transactions continued to be conducted in connection with such person's
account.
I.
The Town is notified of unauthorized charges or transactions in connection
with a customer's account.
In order to detect any of the red flags identified above, Town
personnel will take the following steps when it is reasonably possible
to do so:
In the event any Town official and/or employee becomes aware
of red flags indicating possible identity theft, such employee shall
convey this information to the Town Clerk. If, in his or her discretion,
the Town Clerk deems that identity theft is unlikely or that reliable
information is available to reconcile red flags, the Town Clerk may
in his or her discretion determine that no further action is necessary.
If the Town Clerk determines that further action is necessary, the
Town Clerk or his or her designee shall perform one or more of the
following responses:
The Town Clerk is responsible for oversight of the program and
for program implementation. Any recommended material changes to the
program shall be submitted to the Town Board for consideration and
shall be subject to the Town Board's approval.
The Town Board reserves the right to periodically review this
program and modify and update the program from time to time as necessary,
by amendment to this chapter. In doing so, the Town Board shall consider
the five following factors and exercise its discretion in amending
the program:
