account. A continuing relationship established by a person with an institution to obtain a product or service for personal, family, household, or business purposes. It may involve the extension of credit for the purchase of a product, service, or a deposit account.
account holder. Student, employee, retired employee, faculty, or other person that has a covered account held by or on behalf of the university. Note: An account holder may also be referred to as a debtor.
cardholder. Consumer to whom the university has issued a debit card.
consumer. Student, faculty member, employee, prospective employee, or other individual.
consumer report. Any written, oral, or other communication of information by a consumer reporting agency bearing on a consumer's creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living which is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing the consumer's eligibility for purposes set forth in the Fair Credit Reporting Act 15 USC 1681.
consumer reporting agency. Any person which, for monetary fees, dues, or on a cooperative nonprofit basis, regularly engages in whole or in part in the practice of assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer reports to third parties, and which uses any means or facility of interstate commerce for the purpose of preparing or furnishing consumer reports.
covered account. An account that involves or is designed to permit multiple payments or transactions, which is primarily for personal, family, or household purposes. It is also any account for which there is a reasonably foreseeable risk of identity theft.
Examples of covered accounts include, but are not limited to:
- student loan and tuition accounts
- accounts associated with student debit card and meal plans
creditor. Any institution that regularly extends, renews, or continues credit; any institution that regularly arranges for the extension, renewal, or continuation of credit; or any assignee of an original creditor that participates in the decision to extend, renew, or continue credit.
debit card. Any card issued by the university to a consumer for use in initiating an electronic fund transfer from the account of the consumer at the University for the purpose of transferring money between accounts or obtaining money, property, labor, or services.
identity theft. Any use or attempt by an individual to use another person's individual identifying information to obtain a thing of value including money, credit, items or services, such as education services to which the individual is not entitled.
individual/consumer identifying information. Any information that may be used alone or with other information to identify an individual, including, but not limited to:
- Social Security Number
- date of birth
- telephone or cell phone number
- government-issued driver's license or identification number
- alien registration number
- passport number
- employer or taxpayer identification number
- credit, debit, banking account numbers
- unique biometric data such as fingerprint, voice print, retina or iris image or other unique physical representation
- unique electronic identification number; address or routing code; IP or other computer identifying address; or telecommunication identifying information or other access device
Note: Includes information received about a consumer from a third party source.
red flag. A pattern, practice, or specific activity that indicates the possible existence of identity theft.
responsible party. Appropriate senior officer or employee with sufficient training, experience, and authority
to develop, maintain, and oversee compliance with the university's Identity Theft Prevention Program.
service provider. Any person or entity that provides a service to the university.
Part 19. Risk Management - Table of Contents