Under federal regulations which became effective in 2010, businesses which provide credit to customers must have an identity theft protection program in place and take certain other actions to protect against identity theft.  The Federal Trade Commission (FTC), acting...