The NCUA Board is adopting a final rule to implement section 216 of the Fair and Accurate Credit Transactions Act of 2003 (FACT Act) by amending security program regulations and NCUA's Guidelines for Safeguarding Member Information and establishing a section in new part 717. The final rule generally requires federal credit unions (FCUs) to develop, implement, and maintain appropriate measures to properly dispose of consumer information derived from consumer reports to address the risks associated with identity theft. FCUs are expected to implement these measures consistent with the provisions in NCUA's Guidelines for Safeguarding Member Information.