|
Security Practices
Introduction
Bay Cities Credit Union takes Security very seriously. Below are some Frequently Asked Questions (FAQs) and an overview of the practices that we follow in order to protect the data that has been entrusted to us which is held within our computer systems.
Data Encryption
We support 128-bit SSL (Secure Socket Layer) data encryption for our online business services that require data transmission. We believe that this provides powerful data security.
Incident Response CUNA Mutual has established a process for evaluating and responding to potential security incidents. A core team from our Legal, Compliance, Security and Audit areas is available in the event an incident involving our electronic systems is detected. This team is charged with:
- Evaluating the incident
- Determining the appropriate mitigation strategy
- Determining the appropriate notifications to be made which may include law enforcement officials, credit union customers and other third parties.
Independent Security Assessments
Bay Cities employs the services of various external consulting and auditing firms to test our defenses and report on any vulnerabilities detected.
In addition, our online data security procedures have been tested for vulnerabilities, and we have determined that the Credit Union meets adequate standards for protection of systems and member data.
A team from the Credit Union’s Information Systems Department, regularly works to identify potential data security threats, and to take, what we believe to be, appropriate actions to minimize or eliminate these threats. We take these measures to attempt to assure that the sensitive financial data we receive from our Credit Union members and others is handled according to appropriate data security practices.
Additional Information
From time to time our members, business partners, and other interested parties ask for more detailed information about Bay Cities Credit Union’s information security infrastructure, including specific questions about the types of firewalls we use, how they are configured, operating systems on our servers, and details on our Intrusion Detection and Response procedures. However, we do not believe that it is in the best interest of our members and others with whom we do business to divulge this type of detail about our computer systems and defenses, nor the details of our audits or security reviews. If this type of information were to get into the wrong hands, it could potentially be used against us. The first step in any hacker attack is to determine what types of defenses are in place at the targeted site. Armed with this knowledge, the potential hacker has one less step to go through in order to breach any defenses in place.
Privacy FAQs
Introduction
Protecting member privacy is a priority for Bay Cities Credit Union. Our physical, electronic, and procedural safeguards combine to protect nonpublic personal information in accordance with applicable federal and state laws and regulations. Through cooperative efforts between the Credit Union and the non-affiliated third parties, we protect our members’ privacy and maintain compliance with all applicable laws and regulations.
Q. Do I need to be concerned about any privacy laws?
A. The Gramm-Leach-Bliley Act specifically prohibits financial institutions from sharing account numbers with companies for the purposes of marketing products not related to the Credit Union’s core products. However, the rules do allow for marketing entities to receive membership files that contain encrypted account numbers for billing purposes. To comply with this law under the Program, a third-party provider will encrypt account number data
Q. Is it legal to share my membership information?
A. It is legal to share your membership information with a non-affiliated third party provided that all of rules are followed. These requirements include:
- An Agreement between the Credit Union and the non-affiliated third party which must be executed. This Agreement includes confidentiality provisions that state the non-affiliated third party will not share or sell our members’ nonpublic information.
- The Credit Union must send a Privacy Notice to members stating that we disclose information to third party providers.
Q. Why does Bay Cities Credit Union use third party encryption service?
A. The Gramm-Leach-Bliley Act specifically prohibits financial institutions from sharing account numbers with companies for the purposes of marketing products not related to the Credit Union’s core products. To comply with this law, the Credit Union uses a third-party provider to encrypt account number data.
By providing the encryption/decryption of member account numbers, automatic billing can be enabled through the member’s Credit Union account for AD&D and other insurance products.
Q. What’s typically included in a Privacy Notice?
A. You have chosen to do business with us, and we recognize our responsibility to keep the information you provide to us secure and confidential. You will be provided with a Privacy Notice upon opening your account, once annually, and an updated Notice within 30 days prior to a change of policy. Information included in our Privacy Notice includes:
- Information We Collect and Disclose to Others
- Sharing Information With Third parties As Permitted or Required by Law
- Sharing Information With Third Party Service Providers
- Important Privacy Choices for Members
- Opting Out of Sharing With Other Companies We Do Business With to Provide Financial Products and Services
- Opt Out Election Form
Q. Can I opt out of the sharing of information with non-affiliated third parties?
A. Yes. If you prefer that we do not share personal information about you with our joint marketing partners, you may direct us not to share this information by
- Contacting us at 510-690-6100,
- Faxing us at 510-881-8509
- Opting Out online here
- Completing and mailing the Opt-Out Election Form on the Privacy Policy Disclosure
If you choose to opt out of the sharing of personal information we will not share any information with third parties to whom information disclosure is subject to opt out rights. If you choose to opt out on accounts or loans you hold jointly with another person, both account holders will be opted out.
|
