By Frank R. Mitchell, CITRMS

In the past few years identity theft has grown from a little known concept into a household buzzword. What has been traditionally recognized as a consumer issue is now a critical concern for schools. Why schools, you might ask? Isn’t identity theft the unauthorized or illegal use of another person’s information?

The truth is thieves are getting consumer information from schools. As of October 2008, the Privacy Rights Clearinghouse has documented that over 245 million records have been compromised from United States organizations since January 2005! One in four of these incidents involve educational institutions. According to a Javelin Strategy & Research Survey published in 2008, the total one year amount of identity fraud in 2007 cost $45 billion.

Every school manages personal, financial, medical, or business information in one form or another. Confidential and Sensitive Information is necessary for most operations. However, there can be serious consequences for officials, administrators, faculty, staff, vendors, parents and students if that information is lost or stolen. The results of a breach are often imposed fines, penalties, and potential class action lawsuits involving those who become victims of identity theft.

It is imperative that schools take the threat of identity theft seriously. Currently, federal and state legislation require that a reasonable effort be made to detect, prevent, and mitigate loss of confidential and sensitive information. This Identity Theft Prevention Program should include the appointment of an information security officer, risk assessment, an Identity Theft Prevention Policy, training, vendor management, and a plan for security incidents. Furthermore, to combat the true nature of identity theft, efforts must address management issues beyond technology.

Due to the serious nature of this issue, the Michigan Association of School Administratorshas partnered with Identity Theft Loss Prevention, LLC in a state-wide campaign to prepare Michigan schools in making the reasonable effort required by law to detect, prevent, and mitigate loss resulting in identity theft. For more information, please contact Debbie Kopkau at 517.327.2587 or dkopkau@msbo.org.

Identity Theft Loss Prevention, LLC consultants schools, agencies, small and mid-sized businesses. Their unique information Compliance and Awareness Process is an entire system designed to detect, prevent, and mitigate loss in relation to identity theft compliance requirements, and in making a reasonable effort to safeguard Confidential and Sensitive Information. Please inquire at (888) LOST-MY-ID or info@idtlp.com.