5J-21.009. Security Measures for Petroleum Fuel Measuring Devices


Effective on Sunday, February 20, 2022
  • 1(1) As used in Section 6525.07(10)(a)1., F.S., 8“pressure-sensitive security tape” means tape that is irreversibly broken, destroyed, or watermarked as voided if removed or attempted to be removed after application. Pressure-sensitive security tape does not include tape that is capable of being reused after its initial application.

    48(2) As used in Section 53525.07(10)(a)4., F.S., 55“physical locking mechanism” means a uniquely marked high security lock such as a disc type padlock, a high security bezel lock, 76or a padlock that has a hardened shackle and shackle guard and for which documentation is presented showing that it has been independently tested and found to meet or exceed Central European Norm (CEN) 4111.

    112(3) Each person who owns or operates a retail petroleum fuel measuring device shall have affixed to or installed onto the measuring device at least two security measure to restrict the unauthorized access of customer payment card information. Pursuant to Section 153525.07(10)(a)8., F.S., 155the department shall consider proposed security measures not explicitly authorized by statute and shall approve those found to be at least as restrictive as any one of the security measures listed in Section 188525.07(10)(a), F.S.

    190(4) Each person who owns or operates a retail petroleum fuel measuring device and who wishes to use a security measure not listed in Section 215525.07(10)(a), F.S., 217shall submit FDACS-03577, Request for Approval of Alternative Security Measure, Rev. 12/21, hereby incorporated by reference. A copy of this form may be accessed at 242http://www.flrules.org/Gateway/reference.asp?No=Ref-13981244.

    245(5) Within 30 days of receipt of FDACS-03577, Request for Approval of Alternative Security Measure, Rev. 12/21, incorporated by reference in subsection (4) of this rule, the department shall provide written notification to the owner or manager whose contact information appears on the request that the request has been granted or denied, or that the request does not provide enough information. If the request does not provide enough information for the department to determine whether the proposed security measure should be approved, the department shall notify the owner or manager whose contact information appears on the request that additional information is required. Failure to provide additional information within 30 days of notification shall result in the denial of the request for approval.

    367(6) In determining whether a proposed alternative security measure restricts unauthorized access of customer payment card information, the department will consider the following:

    390(a) The physical, technological, and/or data security provided by the proposed security measure;

    403(b) The ease with which the proposed security measure can be breached;

    415(c) The means by which the proposed security measure can be verified by a department inspector;

    431(d) The expected level of maintenance required to maintain the effectiveness of the proposed security measure; and,

    448(e) The onsite and/or remote maintenance plan that will be used to ensure the proposed security measure has not been breached.

    469(7) The department’s approval of an alternative security measure applies only to those locations indicated in the approved request submitted by an owner or operator. An approved alternative security measure that fails to restrict the unauthorized access of customer payment card information shall be revoked in accordance with Section 518120.60, F.S. 520If an owner or operator wishes to use an identical, department-approved alternative security measure at additional locations, the original request for approval may be supplemented by providing the information required by sections 1.-4. of FDACS-03577, Request for Approval of Alternative Security Measure, Rev. 12/21, incorporated by reference in subsection (4) of this rule.

    573(8) No security measure affixed or installed in accordance with Section 584525.07(10), F.S., 586or this rule shall obstruct the department’s access to the measuring device for inspection purposes.

    601(9) If any petroleum fuel measuring device is found without the security measures required by Section 617525.07(10), F.S., 619or with an illegal skimming or filtering device or an altered or damaged security measure, the device shall be placed out of service by the department through the issuance of a Stop Use Order, and prohibited from further use until documentation confirming the installation, replacement, or repair of the security measure(s) is received by the department and a Release is issued.

    680Rulemaking Authority 682525.07(10)(g), 683525.14, 684570.07(23) FS. 686Law Implemented 688525.07, 689525.08, 690570.07(16)(h) FS. 692History–New 10-5-16, Amended 2-20-22696.