Understanding the Masking and Configurable Unmasking of the Bank Account Numbers to Enhance Data Security

The National Automated Clearing House Association (NACHA) has specified a rule which states that the companies with more than 6 million NACHA payments in 2019 or more than 2 million NACHA payments in 2020 must protect bank account numbers as of June 30, 2021 and June 30, 2022, respectively. To support the compliance of the electronic banking formats for payments for the United States to NACHA, and also to protect data as a good practice, the accounting and payroll managers now have the ability to visually mask bank account numbers in JD Edwards to prevent unauthorized access to this highly sensitive information. The system keeps the bank account numbers masked when they are displayed in JDE applications, reports, and data browser and also while they reside in the transaction files, master files, and work files.

To enable continuous business while maintaining data security, JD Edwards provides you with an option to define exceptions from masking of bank account numbers. Use the Data Protection Configuration program (P0040) to specify the users, the programs, and the level of access for the unmasking of bank account numbers. You can specify the exception from masking of bank account numbers based on these:

  • User or role

    You can specify a user ID, a role for all users in that role, or all roles to be able to view or update the bank account numbers.

  • Program ID

    You can specify a program ID from the UDC table 00/PI. This UDC contains the list of programs that have the capability for unmasking of the bank account numbers.

Note: To enhance bank account number protection for media files and for outbound bank files transmission, JD Edwards recommends that you use secure folders and a secure network.
Note: The Data Protection Configuration program must be secured using the traditional Security Workbench (P00950) application so that only specific administrative and financial process owners can access the program to configure the required exceptions.