2009/04/22 Council Agenda Packet

t -31 effectiveness of the Program in connection with the opening of covered accounts and with respect to existing covered accounts, and recommendations for material changes to the Program. C. Service Provider Arrangements In the event the Utility engages a service provider to perform an activity in connection with one or more covered accounts, the Utility will take the following steps to ensure the service provider performs its activity in accordance with reasonable policies and procedures designed to detect, prevent, and mitigate the risk of Identity Theft. 1. Require, by contract, that service providers have such policies and procedures in place; and 2. Require, by contract,that service providers review the Program, comply fully with the Program and all directives of the Public Works Director or his designee related to the Program, and report any Red Flags to the Public Works Director or his designee. D. Customer Identifying Information and Public Disclosure The Identifying Information of Utility customers with covered accounts shall be kept confidential and shall be exempt from public disclosure to the maximum extent permitted by applicable law. Public disclosure of the Utility's specific practices to identify,detect, prevent, and mitigate Identity Theft may compromise the effectiveness of those practices. Under the Program, knowledge of specific practices shall be limited to the Public Works Director, the Identity Theft Committee and to City officers and employees with a need-to-know. F. Special or Unusual Circumstances The Public Works Director, or his/her designee, may waive any provision of this program when specific circumstances render enforcement of such provision impractical or when unusual circumstances so warrant. Such waiver may be conditioned on such terms as the Public Works Director may determine are appropriate. 19 8