§ 290-628f

290.628f Pump with scanning device for reading customer payment card; security measure required; notice of noncompliance; failure to make correction; prohibition; definitions.Sec. 28f. (1) If a pump for dispensing motor fuel for sale at a roadside retail location includes a scanning device for reading a customer payment card as an integral part of the pump, the pump must include a security measure to restrict the unauthorized access of customer payment card information. The security measure must include 1 or more of the following: (a) Until December 31, 2022, a pressure-sensitive security tape that is imprinted with a customized graphic and placed over the panel opening leading to the scanning device so as to restrict unauthorized opening of the panel. (b) A device or system to render the pump or the scanning device inoperable if the panel is opened without proper authorization. (c) A means for encrypting the customer payment card information in the scanning device. (d) A device to replace a manufacturer-supplied standard lock. (e) Any other measure approved by the department. (2) If the owner or agent of the owner of a pump required to have a security measure under subsection (1)

lace a manufacturer-supplied standard lock. (e) Any other measure approved by the department. (2) If the owner or agent of the owner of a pump required to have a security measure under subsection (1) receives a written notice of noncompliance, he or she shall bring the pump into compliance. If the violation is not corrected within 5 days after receipt of the notice of noncompliance, the department may prohibit the use of the pump until a properly functioning security measure is installed on the device. (3) As used in this section: (a) 'Customer payment card' means a credit or debit card or other card encoded to provide an electronic means for initiating a fund transfer from the customer's deposit account or for initiating electronic billing. (b) 'Pump' means a device for measuring and dispensing motor fuel used to propel vehicles on the highways of this state. (c) 'Scanning device' means a scanner, reader, or any other electronic device that is used to access, read, scan, obtain, memorize, or store, temporarily or permanently, information encoded on the magnetic strip or stripe of a customer payment card. History: Add. 2017, Act 168, Eff. Feb. 19, 2018 ;-- Am. 2022, Act 273, Eff.

rize, or store, temporarily or permanently, information encoded on the magnetic strip or stripe of a customer payment card. History: Add. 2017, Act 168, Eff. Feb. 19, 2018 ;-- Am. 2022, Act 273, Eff. Mar. 29, 2023