Section DFI-Bkg 14.06 - Confidentiality and security requirements No bank may directly or indirectly acquire, place, or operate a customer bank communications terminal, and no bank may participate in the acquisition, placement, or operation of a customer bank communications terminal, unless the bank has implemented precautions, in a manner acceptable to the administrator, to address all of the following:
(1) Preventing unauthorized access to, or use of, the terminal.(2) Preventing information regarding a transaction conducted through the terminal from being disclosed to any person other than any of the following: (a) The customer making the transaction.(b) Any other person who is a party to the transaction or is necessary to effect the transaction, but only to the extent that the information disclosed is necessary to effect the transaction.(c) Those persons lawfully authorized to have access to the records of the bank or of parties to the transaction.(3) Ensuring that the plastic card or other means providing its customers access to the terminal is issued only under one or more of the following circumstances: (a) In response to a request or application therefor.(b) As a renewal of, or in substitution for an accepted card or other means of access, whether issued by the initial issuer or a successor.Wis. Admin. Code Department of Financial Institutions DFI-Bkg 14.06
CR Register, November, 1976, No. 251, eff. 12-1-76.Amended by, correction in (intro.) made under s. 13.92(4) (b) 6, Stats., Register March 2020 No. 771, eff. 4/1/2020Amended by, CR 23-039: am. (intro.), (1), (2) (intro.), (a), (b), (3) (intro.), (a) Register February 2024 No. 819, eff. 4/1/2024