Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« TJX Breach Sentence: Man Gets 5 Years in Prison and Must Pay $600,000 Restitution; Is It Enough? | Main | New FTC Report Provides Organizations Good Guidance For Protecting PII »

Would You Be More Inclined To Work For A Company That Gave You Identity Theft Insurance As A Benefit?

Last year I had a couple of different identity theft insurance vendors contact me wanting me to endorse their products as they were trying to sell the packages to employers to offer to their employees as part of their total benefits packages.

Basically, for a comparatively small amount of premium payments per employee, the employer would provide the insurance to their personnel, and if any of the employees had their identity stolen, the insurance would cover all the costs, beyond the typical actual amount of dollars lost and credit monitoring. It included reimbursement for such activities as the time it took the employee to fill out associated paperwork and the insurer would in fact do much of the paperwork, it would take care of cancelling credit cards, checking with all the big credit agencies (TransUnion, Equifax, Experian), providing a lawyer to do all the legal actities involved, including perhaps taking the case to court, and other assorted activities.

The idea sounded interesting, and on the front-end good, but I had no knowledge of these vendors, so I passed on their request.

Today I thought about them again, though, as I read a report in this week's issue of the BNA Privacy and Security Law Report.

(A subscription site.)

The report highlighted how some companies are now offering identity theft insurance to their employees as a benefit.

"Identity theft protection should go far beyond mere credit monitoring because "more than half of identity theft is noncredit related," Bryan Ansley, chief executive officer of FNB, told BNA. He estimated that clearing up a case of stolen identity takes between 60 and 600 hours, much of which can wind up as lost productivity in the workplace. "Is there any employer who would not want to help with this?" Ansley said. He noted that the chances of being a victim of identity theft are about one in 17 this year, compared with one in 1,800 of filing a homeowner claim and one in 13 of filing a car insurance claim."

Yes, the cost in hours to clean up a breach of a person's personally identifiable information (PII) can easily take 600 hours, and I've had people tell me about the ongoing years, and thousands of hours, it has cost them, and continues to cost them.

The cost to the employer to provide this insurance was reported to be less than one dollar ($1) per month per covered employee.

This certainly is a very inexpensive benefit to provide to employees, and much less cost to the employer than it would be to each individual employee to try to get such coverage on his or her own.

With the FTC estimating there will be 9 million people in the U.S. who have their identity stolen just this year, this could be a very attractive benefit.

I wonder...if an individual had the choice of working for two potential employers, otherwise equal in benefits and positions, would this coverage sway their decision?

It may very well have an impact, perhaps small but still noticeable, in not only attracting employees, but also retaining employees. Getting and keeping good, experienced, employees is a challenge to many organizations right now.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/519

Comments

I think as people learn about and realize the risks, cost and rate of identity theft, i.d. theft insurance will become a more appealing benefit to potential employees.
Right now, the impact i.d. theft insurance will make in attracting, and retaining, quality employees is likely to depend on the industry and the level of awareness an employee has about the issue.

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.