Red Flags Rules

In the event that CSUS engages a service provider to perform an activity in connection with one or more "covered accounts," the contract concluded with such provider must contain the language set forth below. (A "covered account" is an account used mostly for personal, family or household purposes that involves or is designed to permit multiple payments or transactions. Covered accounts include credit card accounts, cell phone accounts, checking accounts and savings accounts. A covered account is also any other account for which there is a reasonably foreseeable risk to customers or to the safety and soundness of CSUS from identity theft, including financial, operational, compliance, reputational or litigation risks.)

Contractor hereby represents that it has enacted policies and procedures designed to detect relevant Red Flags, as defined in 16 CFR 681.2, that may arise in the performance of the Contractor's activities, and agrees that it shall report any such Red Flags detected to Eastern Connecticut State University and take appropriate steps to prevent or mitigate identity theft.