Sec. 28f.

(1) If a pump for dispensing motor fuel for sale at a roadside retail location includes a scanning device for reading a customer payment card as an integral part of the pump, the pump must include a security measure to restrict the unauthorized access of customer payment card information. The security measure must include 1 or more of the following:

(a) Pressure-sensitive security tape that is imprinted with a customized graphic and placed over the panel opening leading to the scanning device so as to restrict unauthorized opening of the panel.

(b) A device or system to render the pump or the scanning device inoperable if the panel is opened without proper authorization.

(c) A means for encrypting the customer payment card information in the scanning device.

(d) A device to replace a manufacturer-supplied standard lock.

(e) Any other measure approved by the department.

(2) If the owner or agent of the owner of a pump required to have a security measure under subsection (1) receives a written notice of noncompliance, he or she shall bring the pump into compliance. If the violation is not corrected within 5 days after receipt of the notice of noncompliance, the department may prohibit the use of the pump until a properly functioning security measure is installed on the device.

(3) As used in this section:

(a) "Customer payment card" means a credit or debit card or other card encoded to provide an electronic means for initiating a fund transfer from the customer's deposit account or for initiating electronic billing.

(b) "Pump" means a device for measuring and dispensing motor fuel used to propel vehicles on the highways of this state.

(c) "Scanning device" means a scanner, reader, or any other electronic device that is used to access, read, scan, obtain, memorize, or store, temporarily or permanently, information encoded on the magnetic strip or stripe of a customer payment card.

History: Add. 2017, Act 168, Eff. Feb. 19, 2018