The rule is an antifraud regulation administered by the FTC that requires financial institutions and creditors, including physician practices, to develop and implement written identity theft prevention programs as part of the Fair and Accurate Credit Transactions Act of 2003.