1. (a) A credit union may use, or participate with others to use, electronic means or facilities to perform any function or provide any product or service as part of an authorized activity. Electronic means or facilities include, but are not limited to, automated teller machines, automated loan machines, personal computers, the Internet, the World Wide Web, telephones, and other similar electronic devices.
2. (b) To optimize the use of its resources, a credit union may market and sell, or participate with others to market and sell, electronic capacities and by-products to others, provided the credit union acquired or developed these capacities and by-products in good faith as part of providing financial services to its members.

3. (c) If a credit union uses electronic means and facilities authorized by this rule, the credit union's board of directors must require staff to:

   1. (1) Identify, assess, and mitigate potential risks and establish prudent internal controls; and

   2. (2) Implement security measures designed to ensure secure operations. Such measures should take into consideration:

      1. (A) the prevention of unauthorized access to credit union records and credit union members' records;
      2. (B) the prevention of financial fraud through the use of electronic means or facilities; and
      3. (C) compliance with applicable security device requirements for teller machines contained elsewhere in Chapter 91.
4. (d) All credit unions engaging in such electronic activities must comply with all applicable requirements, including addressing safety and soundness concerns and ensuring compliance with applicable state and federal laws and regulations.
5. (e) A credit union shall not be considered doing business in this State solely because it physically maintains technology, such as a server, in this State, or because the credit union's product or services are accessed through electronic means by members located in this State.
6. (f) A credit union that shares electronic space, including a co-branded web site, with a credit union affiliate, or another third-party must take reasonable steps to clearly and conspicuously distinguish between products and services offered by the credit union and those offered by the credit union's affiliate, or the third-party.

Source Note:The provisions of this §91.4001 adopted to be effective May 13, 1999, 24 TexReg 3475; amended to be effective May 11, 2000, 25 TexReg 3953; amended to be effective December 8, 2002, 27 TexReg 11074.