The Federal Trade Commission (FTC) announced on July 29th that it will again delay enforcement of the second section of the Red Flags Rule (16 C.F.R. § 681.2) which will require many health care providers to implement programs that identify and respond to indicators of potential identity theft ("Red Flags"). The enforcement deadline of August 1, 2009 has been extended to November 1, 2009. The FTC delayed enforcement of the Red Flags Rule to give creditors and financial institutions three more months to develop and implement written identity theft prevention programs.