TANSTAAFL ~ There Ain't No Such Thing As A Free Lunch.
There are companies that will hold classes to "teach" your employees about Identity Theft Protection which is fine by itself ... the products while not perfect do "protect the employee" that signs up.
Then they give the company a 10 cent compliance tour and pronounce you COMPLIANT with GLB Safeguards and Red Flags ... nothing could be farther from the truth.
The so called privacy consultant makes a heap of money from the employees they sign up are are the major winners in the compliance shell game.
You as the business owner and manager remain at risk - high risk - and believe you are protected. iT AIN'T SO.
These so called compliance experts are only it for the bucks and will even contact all of your third party vendors (you should do this) and again their only reason is to sign up the employees of the third party vendors for ID Theft protection ...
Buyer beware ... FREE always has a cost associated with it ... and YOU will pay
the price someday ...