                                 CODE OF VIRGINIA

REMOTE SERVICE UNITS (§ 6.2-1136)

A. As used in this section:
			&#8220;Personal security identifier&#8221; or &#8220;PSI&#8221; or
&#8220;PIN&#8221; means any word, number, or other security identifier essential
for an account holder to gain access to an account through a remote service
unit.
			&#8220;Remote service unit&#8221; or &#8220;RSU&#8221; means an information
processing device, including associated equipment, structures and systems, by
which information relating to financial services rendered to the public is
stored and transmitted, instantaneously or otherwise, to a financial
institution. Any such device not on the premises of a state savings institution
that, for activation and account access, requires use of a machine-readable
instrument and personal security identifier in the possession and control of an
account holder, is an RSU. The term includes, without limitation, point-of-sale
terminals, merchant-operated terminals, cash-dispensing machines, and automated
teller machines. The term does not include automated teller machines on the
premises of a state savings institution, unless shared with other financial
institutions.

B. Subject to the requirements of the federal Electronic Fund Transfers Act (15
U.S.C. &#xA7; 1693 et seq.) and Regulation E of the Consumer Financial
Protection Bureau, a state savings institution may establish or use remote
service units and participate with others in remote service unit operations on
an unrestricted geographic basis. A state savings institution may establish a
remote service unit without prior approval of the Commission, provided that
notice is given to the Commissioner in accordance with the provisions of
subsection A of &#xA7; 6.2-1133. No remote service unit may be used to open a
savings account or a demand account or to establish a loan account.

C. Before permitting an account holder to use a remote service unit, the savings
institution shall provide a personal security identifier to the account holder
and require its use when accessing a remote service unit. An institution may not
employ RSU access techniques that require the account holder to disclose a PSI
to another person.

D. A state savings institution shall not share an RSU with any financial
institution or other entity the accounts of which are not insured by an agency
of the federal government or by some other insuring agency approved by the
Commissioner.

E. A state savings institution shall not share an RSU located in the
Commonwealth with any foreign savings institution, or other financial
institution that is not incorporated under the laws of the Commonwealth, unless
the foreign savings institution or other financial institution has been
authorized by the Commission to conduct its business in the Commonwealth.
Nothing herein shall be deemed to prohibit a state savings institution from
sharing an RSU with a federal savings institution or other federally chartered
financial institution authorized to conduct its business in the Commonwealth.

F. An RSU shall not be considered to be a branch office of a state savings
institution.

HISTORY: 1985, c. 425, § 6.1-194.29; 1991, c. 230, § 6.1-194.122; 2010, c.
794; 2016, c. 501.