Kohl’s settles FTC case concerning identity theft records
Reprints
The Federal Trade Commission said Wednesday that Kohl’s Department Stores Inc. has agreed to pay $220,000 to settle allegations it violated the Fair Credit Reporting Act by refusing to provide complete records of transactions to consumers whose personal information was used by identity thieves.
The commission alleged in a complaint filed by the Justice Department on its behalf that the Menomonee Falls, Wisconsin-based retailer refused to provide information identifying the thieves to identity theft victims although the FCRA guarantees victims access to this information.
The FTC also alleged the company failed to provide the information within 30 days, as required by the FCRA. The information sought by the victims included sales records made by the identity thieves using stolen personal information, along with the perpetrator’s name and contact information.
Andrew Smith, director of the FTC’s Bureau of Consumer Protection, said in the statement, “This case is a warning to other companies: We will hold you responsible if you fail to give identity theft victims the required business records.”
The retailer said in a statement, “Kohl's takes compliance matters seriously, including the responsibility to assist victims of identity theft.” It said it has taken measures to address the FTC’s concerns and revised its policies.
“In February 2020, Kohl's followed up with approximately 50 Kohl's customers to resolve any outstanding requests. We believe the matter has been transparently addressed to resolution,” the statement said.
