Firms’ ID theft programs found deficient

The SEC simultaneously announced three enforcement actions against firms for violating the identity theft red flags rule