Comment for 1005.18 Requirements for Financial Institutions Offering Payroll Card Accounts
1. Issuance of access device. Consistent with § 1005.5(a), a financial institution may issue an access device only in response to an oral or written request for the device, or as a renewal or substitute for an accepted access device. A consumer is deemed to request an access device for a payroll card account when the consumer chooses to receive salary or other compensation through a payroll card account.
2. Application to employers and service providers. Typically, employers and third-party service providers do not meet the definition of a “financial institution” subject to the regulation because they neither hold payroll card accounts nor issue payroll cards and agree with consumers to provide EFT services in connection with payroll card accounts. However, to the extent an employer or a service provider undertakes either of these functions, it would be deemed a financial institution under the regulation.
18(b) Alternative to Periodic Statements
1. Posted transactions. A history of transactions provided under §§ 1005.18(b)(1)(ii) and (iii) shall reflect transfers once they have been posted to the account. Thus, an institution does not need to include transactions that have been authorized, but that have not yet posted to the account.
2. Electronic history. The electronic history required under § 1005.18(b)(1)(ii) must be provided in a form that the consumer may keep, as required under § 1005.4(a)(1). Financial institutions may satisfy this requirement if they make the electronic history available in a format that is capable of being retained. For example, an institution satisfies the requirement if it provides a history at a Web site in a format that is capable of being printed or stored electronically using a web browser.
18(c) Modified Requirements
1. Error resolution safe harbor provision. Institutions that choose to investigate notices of error provided up to 120 days from the date a transaction has posted to a consumer's account may still disclose the error resolution time period required by the regulation (as set forth in the Model Form in appendix A-7). Specifically, an institution may disclose to payroll card account holders that the institution will investigate any notice of error provided within 60 days of the consumer electronically accessing an account or receiving a written history upon request that reflects the error, even if, for some or all transactions, the institution investigates any notice of error provided up to 120 days from the date that the transaction alleged to be in error has posted to the consumer's account. Similarly, an institution's summary of the consumer's liability (as required under § 1005.7(b)(1)) may disclose that liability is based on the consumer providing notice of error within 60 days of the consumer electronically accessing an account or receiving a written history reflecting the error, even if, for some or all transactions, the institution allows a consumer to assert a notice of error up to 120 days from the date of posting of the alleged error.
2. Electronic access. A consumer is deemed to have accessed a payroll card account electronically when the consumer enters a user identification code or password or otherwise complies with a security procedure used by an institution to verify the consumer's identity. An institution is not required to determine whether a consumer has in fact accessed information about specific transactions to trigger the beginning of the 60-day periods for liability limits and error resolution under §§ 1005.6 and 1005.11.
3. Untimely notice of error. An institution that provides a transaction history under § 1005.18(b)(1) is not required to comply with the requirements of § 1005.11 for any notice of error from the consumer pertaining to a transfer that occurred more than 60 days prior to the earlier of the date the consumer electronically accesses the account or the date the financial institution sends a written history upon the consumer's request. (Alternatively, as provided in § 1005.18(c)(4)(ii), an institution need not comply with the requirements of § 1005.11 with respect to any notice of error received from the consumer more than 120 days after the date of posting of the transfer allegedly in error.) Where the consumer's assertion of error involves an unauthorized EFT, however, the institution must comply with § 1005.6 before it may impose any liability on the consumer.