Legal Defenses and Penalties for Identity Theft