20:04:35:36Securing payment methods.

The hub licensee shall have procedures to ensure all financial transactions are conducted in accordance with federal regulations and the commission's rules. To protect payment methods against fraudulent uses, the licensee shall: (1) Ensure collection of sensitive information directly related to financial transactions must be limited to the information strictly needed for the transaction; (2) Take adequate measures to protect any type of payment in the system from a fraudulent use; (3) Verify that the payment processors ensure the protection of the account holder's data, including any sensitive information given by the account holder, or transaction-related data; (4) Establish a procedure for assuring a match of ownership between the payment-type holder and the account holder; and (5) Generate all transactional records of accounts. The data recorded must allow the licensee to trace a single financial transaction of an account holder from another transaction. All financial transactions must be reconciled with financial institutions and payment processors daily or as otherwise specified by the commission. Additional requirements for payment processors may be specified by the commission through internal controls.

Source: 53 SDR 35, effective September 30, 2026.