2 pages. Excerpt: Regardless of the FTC's determinations, it is important to remember that plan fiduciaries have a general duty under ERISA to protect participant information. The identity theft program required under the Red Flag Rules can serve as a helpful starting point for plan sponsors in developing or updating procedures for protecting participants from identity theft. The FTC has developed an online tool to help covered entities design an identity theft program to meet their specific needs (http://www.ftc. gov/bcp/edu/microsites/redflagsrule/get-started.shtm).  MORE >>