Identity theft protection and legal rights