The FTC amends its Privacy Act rules to include a new exempt system of records that will be used to compile and maintain identity theft complaint data. This system implements the requirements of the Identity Theft and Assumption Deterrence Act of 1998. The exemption will help prevent individuals suspected of engaging in identity theft from obtaining access to complaint data.