These laws generally require business entities, non-profits, & governmental bodies to:

• Appoint/Re-Appoint in writing, an Information Security Officer
• Develop a written plan and policy to protect non-public & personal identifiable information for employees and customers
• Hold training for all employees
• Oversee service provider arrangements
   

  FACTA - FCRA
  Identity Theft Red Flags Rule
   Gramm, Leach Bliley

Wiley Rein, LLP - White Paper - Your Growing Exposure for Identity Theft Risks