Email Record: Businesses must provide victims and law enforcement with transaction records relating to identity theft.