Which types of personal information are protected under the FACT Act's privacy and security provisions?

• A. Only Financial account numbers.
• B. Only names.
• C. Only Social Security numbers.
• D. Names, addresses, Social Security numbers, dates of birth, account numbers, and other identifiers that could be used for identity theft.

Answer: (D)

The protections under FACT Act privacy and security provisions cover a broad range of personal information that could be used to commit identity theft. The best choice reflects that wide scope by listing common identifiers—names, addresses, Social Security numbers, dates of birth, and account numbers—and it also recognizes that other identifiers not explicitly named can be risky. This comprehensive view aligns with how the law views identity-theft risk: multiple pieces of data, sometimes in combination, can expose a consumer, so protections aren’t limited to a single data type.

Choosing a narrower set—such as only financial account numbers, only names, or only Social Security numbers—misses other important identifiers that the provisions protect and doesn’t capture the full scope of information that could be exploited to steal someone’s identity. The inclusion of “and other identifiers” is key, ensuring coverage of additional data like driver’s license numbers, dates of birth, or other unique identifiers.