The Federal Trade Commission (“FTC”) has again delayed enforcement of the Red Flags Rule, this time at the request of members of Congress. The press release can be found here. In addition, some politicians have not given up the fight to exempt certain small business, including small medical practices, from complying with the FTC's Identity Theft Prevention Plan mandate. Rep. Adler of New Jersey introduced a bill that has already passed the house (H.R. 3763) that would amend the Fair Credit Reporting Act to provide for an exclusion for certain businesses including a healthcare practice with twenty (20) or fewer employees. Stay tuned to see if this exemption passes the Senate.