Current through Public Act 171 of the 2024 Legislative Session
Section 290.628f - Pump with scanning device for reading customer payment card; security measure required; notice of noncompliance; failure to make correction; prohibition; definitions(1) If a pump for dispensing motor fuel for sale at a roadside retail location includes a scanning device for reading a customer payment card as an integral part of the pump, the pump must include a security measure to restrict the unauthorized access of customer payment card information. The security measure must include 1 or more of the following:(a) Until December 31, 2022, a pressure-sensitive security tape that is imprinted with a customized graphic and placed over the panel opening leading to the scanning device so as to restrict unauthorized opening of the panel.(b) A device or system to render the pump or the scanning device inoperable if the panel is opened without proper authorization.(c) A means for encrypting the customer payment card information in the scanning device.(d) A device to replace a manufacturer-supplied standard lock.(e) Any other measure approved by the department.(2) If the owner or agent of the owner of a pump required to have a security measure under subsection (1) receives a written notice of noncompliance, he or she shall bring the pump into compliance. If the violation is not corrected within 5 days after receipt of the notice of noncompliance, the department may prohibit the use of the pump until a properly functioning security measure is installed on the device.(3) As used in this section:(a) "Customer payment card" means a credit or debit card or other card encoded to provide an electronic means for initiating a fund transfer from the customer's deposit account or for initiating electronic billing.(b) "Pump" means a device for measuring and dispensing motor fuel used to propel vehicles on the highways of this state.(c) "Scanning device" means a scanner, reader, or any other electronic device that is used to access, read, scan, obtain, memorize, or store, temporarily or permanently, information encoded on the magnetic strip or stripe of a customer payment card.Amended by 2023, Act 273,s 8, eff. 3/29/2023.Added by 2017, Act 168,s 1, eff. 2/19/2018.