Due to Congressional action on December 7, 2010, health care providers are now exempt as "creditors" in the FTC Red Flag Address and Discrepancy Rule. This legislation specifically excludes health care providers as "creditors" due to a change in the definition of "creditor," which included those who "advance funds by providing services in advanced of receiving payment," as with claims filed to third party payors. Audiologists should continue to implement and maintain standardized safeguards to ensure the protection of patient Personal Health Information (PHI), as required by HIPAA and other federal and state regulations. Due to the risk of medical identity theft, it is recommended that the identity of patients be verified, especially for patients who are new to a practice.