The Rule was developed under the Fair and Accurate Credit Transactions Act, in which Congress directed the FTC and other agencies to develop regulations requiring ???creditors??? and ???financial institutions??? to address the risk of identity theft.