The rule proposal asserts that a financial institution or creditor that offers or maintains one or more covered accounts mustdevelop and implement a written program designed to detect, prevent, and mitigate identity theft in connection with the opening of a covered account or any existing covered account.