To amend the Fair Credit Reporting Act to provide for an exclusion from Red Flag Guidelines for health care practices with 20 or fewer employees.

Amends the Fair Credit Reporting Act with respect to the duties of users of consumer reports taking adverse actions on the basis of information contained in such reports. Excludes any health care practice with 20 or fewer employees from the meaning of creditor subject to Red Flag Guidelines regarding identity theft promulgated by the proper federal financial regulatory agency.