(205 ILCS 695/1) Sec. 1. Short title. This Act may be cited as the Automated Teller Machine Security Act. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/5) Sec. 5. Definitions. As used in this Act, the term: "Access area" means any paved walkway or sidewalk that is within 50 feet of any automated teller machine. The term does not include any street or highway open to the use of the public or any adjacent sidewalk. "Access device" has the same meaning as set forth in Federal Reserve Board Regulation E, 12 C.F.R. Part 205, promulgated pursuant to the federal Electronic Fund Transfer Act, 15 U.S.C. Section 1601, et seq. "Automated teller machine" means any electronic information processing device located in this State that accepts or dispenses cash in connection with a credit, deposit or convenience account. The term does not include devices used (i) solely to facilitate check guarantees or check authorizations, (ii) in connection with the acceptance or dispensing of cash on a person-to-person basis, including by store cashier, or (iii) for payment in connection with the purchase of goods or services. "Candlefoot power" means the light intensity of candles on a horizontal plane at 36 inches above ground level and 5 feet in front of the area to be measured. "Control" of an access area or defined parking area means to have the present authority to determine how, when and by whom the access area is to be maintained, lighted, and landscaped. "Customer" means a natural person to whom an access device has been issued for personal, family, or household use. "Defined parking area" means that portion of any parking area open for customer parking that is: (1) Contiguous to an access area with respect to an

automated teller machine;

(2) Regularly, principally, and lawfully used for

parking by users of the automated teller machine while conducting automated teller machine transactions during the hours of darkness; and

(3) Owned or controlled by the operator of the

automated teller machine or by the party leasing the automated teller machine site to the operator. The term does not include any parking area that (i) is not open or regularly used for parking by users of the automated teller machine who are conducting automated teller machine transactions during the hours of darkness or (ii) is physically closed to access or is marked by conspicuous signs indicating that it is closed. If a multiple-level parking area satisfies the conditions of this paragraph and would therefore otherwise be a defined parking area, only the single parking level deemed by the operator of the automated teller machine to be the most directly accessible to the users of the automated teller machine shall be a defined parking area.

"Financial institution" means a state or federally chartered bank, savings and loan association, savings bank, or credit union. "Hours of darkness" means the period that begins 30 minutes after sunset and ends 30 minutes before sunrise. "Operator" means any financial institution or other business entity or any other person who operates an automated teller machine, but does not include any person or entity whose primary function is to provide for the exchange, transfer or dissemination of electronic fund transfer data, including, without limitation, any network or switch established under the Electronic Fund Transfer Act. "Public road" means any public right of way, including, but not limited to, structures, sidewalks, facilities, and appurtenances incidental thereto. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/10) Sec. 10. Date of compliance; provision of adequate lighting. (a) An operator of an automated teller machine installed on or after July 1, 1997 shall comply with the provisions of subsection (c) of this Section commencing on the date the automated teller machine is installed. Compliance with subsection (c) of this Section by operators as to automated teller machines existing as of July 1, 1997 shall be optional until July 1, 1998 and mandatory thereafter. This Act applies to an operator of an automated teller machine only to the extent that the operator controls the access area or defined parking area to be lighted. (b) If an access area or defined parking area is not controlled by the operator of the automated teller machine, and if the person who leased the automated teller machine site to the operator controls the access area or defined parking area, the person who controls the access area or defined parking area shall comply with subsection (c) of this Section as to any automated teller machines installed on or after July 1, 1997, commencing on the date the automated teller machine is installed and as to any automated teller machine existing as of July 1, 1997, commencing no later than July 1, 1998. (c) The operator, owner, or other person responsible for the automated teller machine shall provide lighting during the hours of darkness with respect to an open and operating automated teller machine and any defined parking area, access area, and the exterior of an enclosed automated teller machine installation according to all of the following standards: (1) There shall be a minimum of 10 candlefoot power

at the face of the automated teller machine and extending outward 5 feet.

(2) There shall be a minimum of 2 candlefoot power

within 50 feet from all unobstructed directions from the face of the automated teller machine. In the event the automated teller machine is located within 10 feet of the corner of the building and the automated teller machine is generally accessible from the adjacent side, there shall be a minimum of 2 candlefoot power along the first 40 unobstructed feet of the adjacent side of the building.

(3) There shall be a minimum of 2 candlefoot power in

that portion of the defined parking area within 60 feet of the automated teller machine.

(Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/15) Sec. 15. Notices to customers of basic safety precautions. The issuer of an access device shall furnish a customer receiving the device with a notice of basic safety precautions that the customer should employ while using an automated teller machine. This information shall be furnished by personally delivering or by mailing the information to each customer whose mailing address for the account to which the access device relates is in the State of Illinois. This information shall be furnished with respect to access devices issued on or after July 1, 1997, at or before the time the customer is furnished with his or her access device. With respect to a customer to whom an access device has been issued prior to July 1, 1997, the information shall be delivered on or before July 1, 1998. Only one notice need be furnished per household, and if access devices are furnished to more than one customer for a single account or set of accounts or on the basis of a single application or other request for access devices, only a single notice need be furnished in satisfaction of the notification responsibilities as to those customers. The information may be included with other disclosures related to the access device furnished to the customer, such as with any initial or periodic disclosure statement furnished pursuant to the federal Electronic Fund Transfer Act. The issuer of an access device shall be deemed to be in compliance with the notice requirement of this Section if the issuer advises the customer: (1) to be aware of the customer's surroundings when using an automated teller machine, particularly during the hours of darkness; (2) to be accompanied by another person when using an automated teller machine during the hours of darkness; (3) to refrain from displaying cash, to place cash in a pocket as soon as a transaction is completed, and to count cash in the safety of a locked enclosure such as a car or home; (4) to use another automated teller machine or return at a later time if anything suspicious is noticed when using or considering using an automated teller machine; and (5) to report all crimes immediately to the operator of the automated teller machine or to local law enforcement officials. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/20) Sec. 20. Procedures for evaluating safety of automated teller machines. On or before July 1, 1998, with respect to all existing installed automated teller machines in the State of Illinois and any automated teller machines installed in the State of Illinois after July 1, 1997, the operator shall adopt procedures for evaluating the safety of the automated teller machines for both customers and agents of the operator. These procedures shall include a consideration of the following: (1) the extent to which the lighting for the automated teller machine complies or will comply with the standards required by subsection (c) of Section 10; (2) the presence of landscaping, vegetation, or other obstructions in the area of the automated teller machine, the access area, and the defined parking area; and (3) the incidence of crimes of violence in the immediate neighborhood of the automated teller machine as reflected in the records of the local law enforcement agency and of which the operator has actual knowledge. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/25) Sec. 25. Terminals to which Act not applicable. This Act does not apply to any automated teller machine that: (1) is located inside a building, unless it is a freestanding installation that exists for the sole purpose of providing an enclosure for the automated teller machine; (2) is located inside a building, except to the extent a transaction can be conducted from outside the building; or (3) is located in any area, including any access area, building, enclosed space, or parking area, that is not controlled by the operator. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/30) Sec. 30. Inapplicability to persons or entities that are not financial institutions or operators. The provisions of this Act shall not be construed to create any duty, responsibility, or obligation for any network or switch as defined under the Electronic Fund Transfer Act or any other person or entity whose primary function is to provide for the exchange, transfer, or dissemination of electronic fund transfer data so long as the person or entity is not otherwise a financial institution or an operator, as defined in this Act, and the person or entity shall have no liability of any nature to any operator, customer, or user of an automated teller machine and shall not be named in any action by an operator, customer, or user of an automated teller machine for any claim concerning any provision of this Act or relating to the use or attempted use of an automated teller machine. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/35) Sec. 35. Standard of care. The intent of the General Assembly of the State of Illinois in enacting this Act is to enhance the safety of consumers using automated teller machines in the State of Illinois without discouraging the placement of automated teller machines in locations convenient to consumers' homes and work places. Because decisions concerning safety at automated teller machines are inherently subjective, the General Assembly establishes as the standard of care applicable to owners or operators of automated teller machines and persons who control access areas or defined parking areas in connection with user safety, substantial compliance with Section 10 and, if the owners or operators or persons who control access areas or defined parking areas are also issuers of access devices, substantial compliance, in addition, with Section 15 of this Act. The General Assembly establishes as the standard of care applicable to issuers of access devices substantial compliance with Section 15 of this Act. It is not the intent of the General Assembly in enacting this Act to impose a duty to relocate or modify automated teller machines upon the occurrence of a particular event or circumstance. Substantial compliance with Section 10 of this Act shall constitute prima facie evidence that an owner or operator of an automated teller machine, and a person who controls an access area or defined parking area, has provided adequate and reasonable measures for the safety of customers. Substantial compliance with Section 15 of this Act shall constitute prima facie evidence that an issuer of an access device has provided adequate and reasonable measures for the safety of customers. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/40) Sec. 40. Home rule. The regulation of customer safety at automated teller machines located in the State of Illinois and the regulation and licensing of operators of automated teller machines, issuers of access devices, and persons who control an access area or defined parking area are exclusive powers and functions of the State. A home rule unit may not regulate or license operators of automated teller machines, issuers of access devices, or persons who control access areas or defined parking areas with respect to customer safety. This Section is a denial and limitation of home rule powers and functions under subsection (h) of Section 6 of Article VII of the Illinois Constitution. (Source: P.A. 89-542, eff. 7-19-96.)

(205 ILCS 695/99) Sec. 99. Effective date. This Act takes effect upon becoming law. (Source: P.A. 89-542, eff. 7-19-96.)