Federal Trade Commission (“FTC” or “Commission”).
Notice; request for comments.
The FTC intends to ask the Office of Management and Budget (“OMB”) to extend for an additional three years the current Paperwork Reduction Act (“PRA”) clearance for the information collection requirements in the FTC Red Flags, Card Issuers, and Address Discrepancies Rules 
(“Rules”). That clearance expires on November 30, 2018.
Comments must be submitted by December 13, 2018.
Interested parties may file a comment online or on paper by following the instructions in the Request for Comment part of the SUPPLEMENTARY INFORMATION section below. Write “Red Flags Rule, PRA Comment, Project No. P095406” on your comment. File your comment online at https://ftcpublic.commentworks.com/ftc/RedFlagsPRA2 by following the instructions on the web-based form. If you prefer to file your comment on paper, mail your comment to the following address: Federal Trade Commission, Office of the Secretary, 600 Pennsylvania Avenue NW, Suite CC-5610 (Annex J), Washington, DC 20580, or deliver your comment to the following address: Federal Trade Commission, Office of the Secretary, Constitution Center, 400 7th Street SW, 5th Floor, Suite 5610 (Annex J), Washington, DC 20024.
Start Further Info
FOR FURTHER INFORMATION CONTACT:
Requests for additional information should be addressed to Mark Eichorn, Assistant Director, Division of Privacy and Identity Protection, Bureau of Consumer Protection, (202) 326-3053, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580.
End Further Info
Start Supplemental Information
Title: Red Flags Rule, 16 CFR 681.1; Card Issuers Rule, 16 CFR 681.2; Address Discrepancy Rule, 16 CFR part 641.
OMB Control Number: 3084-0137.
Type of Review: Extension of currently approved collection.
Abstract: The Red Flags Rule requires financial institutions and certain creditors to develop and implement written Identity Theft Prevention Programs. The Card Issuers Rule requires credit and debit card issuers to assess the validity of notifications of address changes under certain circumstances. The Address Discrepancy Rule provides guidance on what covered users of consumer reports must do when they receive a notice of address discrepancy from a nationwide consumer reporting agency. Collectively, these three anti-identity theft provisions are intended to prevent impostors from misusing another person's personal information for a fraudulent purpose.
The Rules implement sections 114 and 315 of the Fair Credit Reporting Act (“FCRA”), 15 U.S.C. 1681 et seq.
The Commission received no relevant public comments on the Rules' information collection requirements and FTC staff's associated PRA burden analysis and estimates that appeared in an August 8, 2018 Federal Register Notice.
That Notice discusses in greater detail staff's methodology behind the estimates restated here in summary form, while also providing an overview of the Rules and the statutes that underlie them.
Pursuant to the OMB regulations, 5 CFR part 1320, that implement the PRA, Start Printed Page 5632644 U.S.C. 3501 et seq., the FTC is providing a second opportunity for the public to comment on:
(1) Whether the disclosure requirements are necessary, including whether the information will be practically useful; (2) the accuracy of our burden estimates, including whether the methodology and assumptions used are valid; (3) ways to enhance the quality, utility, and clarity of the information to be collected; and (4) ways to minimize the burden of the collection of information.
Estimated Annual Burden (1,385,290 hours; $66,185,200, labor costs)
A. Section 114: Red Flags and Card Issuers Rules:
(1) Red Flags:
(a) Estimated Number of Respondents: 157,585 
(i) High-Risk Entities: 94,052 
(ii) Low-Risk Entities: 63,533 
(b) Estimated Hours Burden: 
(i) High-Risk Entities: 1,222,676 hours
(ii) Low-Risk Entities: 39,179 hours
(2) Card Issuers Rule:
(a) Estimated Number of Respondents: 16,742 
(b) Estimated Hours Burden: 66,968 hours
(3) Combined Labor Cost Burden: $65,112,327
B. Section 315—Address Discrepancy Rule:
(1) Estimated Number of Respondents: 121,000 
(2) Estimated Hours Burden: 56,467 hours 
(3) Estimated Labor Cost Burden: $1,072,873 
C. Capital/Non-Labor Costs for Sections 114 and 315.
FTC staff believes that the Rules impose negligible capital or other non-labor costs, as the affected entities are likely to have the necessary supplies and/or equipment already (e.g., offices and computers) for the information collections described herein.
IV. Request for Comment
You can file a comment online or on paper. For the FTC to consider your comment, we must receive it on or before December 13, 2018. Write “Red Flags Rule, PRA Comment, Project No. P095406” on your comment. Your comment—including your name and your state—will be placed on the public record of this proceeding, including, to the extent practicable, on the public FTC website, at http://www.ftc.gov/os/publiccomments.shtm.
Postal mail addressed to the Commission is subject to delay due to heightened security screening. As a result, we encourage you to submit your comments online, or to send them to the Commission by courier or overnight service. To make sure that the Commission considers your online comment, you must file it at https://ftcpublic.commentworks.com/ftc/RedFlagsPRA2 by following the instructions on the web-based form. When this Notice appears at http://www.regulations.gov/#!home, you also may file a comment through that website.
If you file your comment on paper, write “Red Flags Rule, PRA Comment, Project No. P095406” on your comment and on the envelope, and mail it to the following address: Federal Trade Commission, Office of the Secretary, 600 Pennsylvania Avenue NW, Suite CC-5610 (Annex J), Washington, DC 20580, or deliver your comment to the following address: Federal Trade Commission, Office of the Secretary, Constitution Center, 400 7th Street SW, 5th Floor, Suite 5610 (Annex J), Washington, DC 20024. If possible, submit your paper comment to the Commission by courier or overnight service.
Because your comment will be placed on the publicly accessible FTC website at https://www.ftc.gov/, you are solely responsible for making sure that your comment does not include any sensitive or confidential information. In particular, your comment should not include any sensitive personal information, such as your or anyone else's Social Security number; date of birth; driver's license number or other state identification number, or foreign country equivalent; passport number; financial account number; or credit or debit card number. You are also solely responsible for making sure that your comment does not include any sensitive health information, such as medical records or other individually identifiable health information. In addition, your comment should not include any “trade secret or any commercial or financial information which . . . is privileged or confidential”—as provided by Section 6(f) of the FTC Act, 15 U.S.C. 46(f), and FTC Rule 4.10(a)(2), 16 CFR 4.10(a)(2)—including in particular competitively sensitive information such as costs, sales statistics, inventories, formulas, patterns, devices, manufacturing processes, or customer names.
Comments containing material for which confidential treatment is requested must be filed in paper form, must be clearly labeled “Confidential,” and must comply with FTC Rule 4.9(c). In particular, the written request for confidential treatment that accompanies the comment must include the factual and legal basis for the request, and must identify the specific portions of the comment to be withheld from the public record. See FTC Rule 4.9(c). Your comment will be kept confidential only if the General Counsel grants your request in accordance with the law and the public interest. Once your comment has been posted on the public FTC Start Printed Page 56327website—as legally required by FTC Rule 4.9(b)—we cannot redact or remove your comment from the FTC website, unless you submit a confidentiality request that meets the requirements for such treatment under FTC Rule 4.9(c), and the General Counsel grants that request.
Comments on the information collection requirements subject to review under the PRA should additionally be submitted to OMB. If sent by U.S. mail, they should be addressed to Office of Information and Regulatory Affairs, Office of Management and Budget, Attention: Desk Officer for the Federal Trade Commission, New Executive Office Building, Docket Library, Room 10102, 725 17th Street NW, Washington, DC 20503. Comments sent to OMB by U.S. postal mail, however, are subject to delays due to heightened security precautions. Thus, comments instead can also be sent by email to email@example.com.
End Supplemental Information
Deputy General Counsel.
[FR Doc. 2018-24682 Filed 11-9-18; 8:45 am]
BILLING CODE 6750-01-P