Red Flags Rule and Identity Theft Prevention Programs

The Red Flags law requires creditors to have in place Identity Theft Prevention Programs. In light of recent changes in the Red Flags law, there seems to be some confusion as to whether healthcare providers are categorically excluded from the requirements of the law.