Which of the following is NOT a typical FACT Act compliance obligation?

• A. Red Flags Rule
• B. Disposal Rule
• C. Breach notification
• D. Automatic approval of all credit offers

Answer: (D)

FACT Act compliance centers on protecting consumer information and preventing identity theft. The option describing automatic approval of all credit offers is not something the Act requires (and, in fact, would undermine safeguards). The Act emphasizes concrete protections like detecting and addressing identity‑theft risks, securely disposing of sensitive data, and providing notice to consumers if their information is involved in a breach. So, implementing an automatic, blanket approval process isn’t a recognized FACT Act obligation, making it the best answer.

To connect the others: Red Flags Rule requires an identity‑theft prevention program to detect and respond to suspicious activity. The Disposal Rule mandates secure disposal of consumer information to prevent exposure. Breach notification is about informing consumers when their data has been compromised, helping them take protective steps.