Your dealership must have an identity theft program in place, as a creditor. Your dealership must implement a written identity theft prevention program designed to detect the “red flags” of identity theft in your day-to-day operations, take steps to prevent the crime, and mitigate its damage.