Department of Agriculture, Trade and Consumer Protection

Data Breaches: What to Do

You just found out from the news or a notification letter that your personal information was part of a data breach. What should you do? You can take a few simple steps to protect yourself from the risk of having your personal information compromised further.

Wisconsin's Data Breach Notification Law

Section 134.98 of the Wisconsin Statutes requires most businesses to notify individuals if an unauthorized person has acquired their personal information. The business must be operating in Wisconsin and maintaining personal information about individuals who reside in Wisconsin. This law also applies to Wisconsin state government agencies, cities, towns, villages, and counties.

Authorization for Release of Information Form (PDF)

Form authorizing an organization to release records to DATCP that contain information relating to your identity. DATCP and other cooperating law enforcement agencies will use this information to investigate your identity theft complaint.

Complaint Form ID Theft (PDF)

Identity theft complaints can be filed with DATCP by mail using this complaint form or by filing online through the DATCP website.

Complaint Form ID Theft Packet (PDF)

Packet includes a "Filing an Identity Theft Complaint" fact sheet, an identity theft complaint form, a non-consent form, an authorization for release of information form, and an "Identity Theft: Consumer Tips" fact sheet.

How to File a Complaint

The Wisconsin Bureau of Consumer Protection assists and educates Wisconsin consumers who may be the victims of identity theft or fraud. Within a few days of receiving your complaint, a consumer protection investigator will review it to determine the appropriate course of action. If your complaint is part of a larger identity theft or identity fraud investigation, we may share your complaint with the appropriate local, state and federal authorities.

Non-Consent Form (PDF)

Form to acknowledge that you did not give consent for someone to take actions using your identity or the identity of any person under your legal guardianship (requires notarization).

Requesting Information on Fraudulent Accounts

Federal law gives an identity theft victim the right to get copies of documents relating to fraudulent transactions made or accounts opened using the victim’s personal information. You may use the form provided with this information sheet to ask creditors or other businesses to give you copies of applications and other business records relating to transactions or accounts that resulted from the theft of your identity.

GPS Safety Tips

Mobile devices use GPS for location-based services and automatically adding geolocation information to pictures taken with the onboard cameras – a practice known as "geotagging." Most people do not realize that the geotagging of photos is set as a default action on their mobile devices and that they are unknowingly sharing a great deal of information about their exact location by simply snapping photos and posting them online.

Identity Theft Consumer Tips

Any combination of basic personal details (name, address, birthdate, Social Security number, etc.) is all it takes for an identity thief to misuse your identity. Learn more about the basics of safeguarding your information.

Identity Theft Protection Services

There are many businesses, insurance companies and financial institutions that now offer credit report monitoring services, identity theft protection and identity theft insurance. Before you pay for a service, do your research to determine if it is something you really need and if it is worth the cost.

Identity Theft Safeguards

There are a number of ways to protect your personal information, including knowing who you share your information with, storing and disposing of your personal information securely, asking questions before deciding to share your personal information, and maintaining appropriate security on your computers and other electronic devices.

Medical Identity Theft

Medical identity theft occurs when someone uses another person's personal information (name, birth date, insurance information, etc.) to obtain medical goods or services or uses the victim's information to make fraudulent claims for medical goods or services. Because medical identity theft can result in serious harm, all consumers need to be aware of what it is and how to protect themselves.

Phishing, Vishing, Smishing...

The term “Phishing,” was intentionally coined as a play on “fishing.” Fishing is exactly what the scam artists are doing – throwing you deceptive bait to see if you will bite and give up your personal information. Once they have that, scammers can make unauthorized charges to your bank account or credit card, or even open fraudulent accounts in your name.

Privacy Notices

Privacy notices explain what personal financial information a company collects; whether the company intends to share your personal financial information with other companies; what you can do to limit some of that sharing; and how the company protects your personal financial information. The bottom line is that it is important to read these privacy notices.

Text Spam - "Smishing"

With the growing popularity of texting, phishers are using it as another means to gather consumers' personal information. This is known as “smishing.” Text spam is particularly problematic as consumers often have to pay for the incoming messages, messages may have to be opened in order to be deleted, and texting back “stop” can invite more spam.

Vacation Protection Tips

Vacation should be a time of rest and relaxation, but it is also a prime opportunity for identity thieves who might take advantage of changed routines and more informal settings. It is important to remember that when you travel, your risk of exposure to fraud and identity theft may increase. It is a fact that people tend to let their guard down while on vacation. Criminals know this.

What's in Your Wallet?

Many wallets contain enough personal information for an identity thief to steal your identity without a great deal of difficulty. Follow some simple tips to minimize the risk of identity theft.

What to Do If It Happens to You

There are a number of useful steps that identity theft victims can take to help clear their records and reclaim their identities.

Your Social Security Number

Social security numbers were originally created for the purpose of tracking earnings and paying benefits. They were never meant to be used by businesses as an identifier, but have taken on that role because everyone has one. And, of course, thieves also want your social security number in order to set up fraudulent accounts in your name.