Skip to Content

Red Flags Rule Program

Identity Theft Prevention at the University


In accordance with the Fair and Accurate Credit Transaction Act (FACTA) of 2003 and the subsequent Federal Trade Commission (FTC) “Red Flags Rule” of 2007, the University has established a comprehensive, coordinated, and university-wide approach for facilitating the detection, prevention, and mitigation of identity theft.


Your University business unit or department should participate in the program if:

  1. You provide goods or services and payment can be deferred to an account established with the University. For instance, students are allowed to purchase goods by presenting their student I.D. and have those charges posted to their student account.
  2. You have management and/or oversight responsibility for established accounts.
  3. You provide loans to students or other customer groups.

If you aren't certain whether your unit's activity is subject to the Red Flag Rule after reviewing this website please email us at The Assistant Vice President for Finance and University Comptroller can help to determine whether these rules apply to you.

Questions about the University of Virginia's Red Flag Rule Program? Contact us at: