The Identity Theft and Assumption Deterrence Act is the piece of legislation that makes identity theft a felony in the U.S. with a maximum sentence of 15 years. It also includes provisions for mandatory restitution.