Laserfiche WebLink
address requests or other account change requests. In addition, where appropriate, the Utility may also take <br />any of the steps listed in Section 2.1) as stated above. <br />Section 4. ONGOING ADMINISTRATION <br />A. The Utility shall take such steps so as to periodically update its procedures for detecting Red Flags and <br />potential identity theft, taking into account factors such as the Utility's experiences with identity theft and <br />changes in the methods to identify and mitigate identity theft. The Director of Finance shall serve as the <br />Program Manager shall have oversight over the Policy and shall be provided reports by Utility staff <br />generated in conjunction with the administration of the Policy. In addition, the Utility shall update this <br />Policy from time to time as needed, and in order to maintain compliance with the Rule, as contained in 16 <br />CFR Part 681. <br />Section S. VIRGINIA BREACH OF PERSONAL INFORMATION NOTIFICATION STATUTE <br />A. The Utility shall take such steps as are necessary in order to stay in compliance with the Virginia Breach of <br />Personal Information Notification Statute, Virginia Code Section 18.2-186.6 ("Statute'). The Statute <br />requires the Utility to report any unauthorized breaches of its customer database or other systems housing <br />personal information of its customers. The report must be made to both the Office of the Attorney General <br />and to any affected customer whose personal information has been, or is reasonably believed to have been, <br />accessed and acquired by an unauthorized person. The Statute specifies the type of notice that is acceptable. <br />Acceptable notice include the following: <br />1. Written notice to the last known postal address in the records of the customer or business. <br />2. Telephone notice. <br />3. Electronic notice. <br />4. Substitute notice, in specific instances under the Statute. <br />B. The contents and description to be included in the notice are specified in the Statute. The Utility shall <br />• update this Policy from time to time in order to maintain compliance with the Statute. <br />• <br />