RFI #
2111
835 BPR06-BPR11 for EFT/ERA
Description
We understand BPR06-11 is required for ACH but are concerned about giving out the payer bank account number. Is there an option to mask the bank account number and maybe show the last four digits. Please advise.
RFI Response
The TR3 does not support the masking of data elements including the bank account numbers. It should be noted that the Electronic Remittance Advice (ERA) 835 transaction contains sensitive information beyond just the payer bank account number; including Personal / Protected Health Information (PHI). As a consequence, ERA transactions must be secured in accordance with the HIPAA security and privacy rules; which should also protect the payer bank account number.
DOCUMENT ID
005010X221