Section 10-160. Security measures at automated teller machine facilities

a. Definitions. For purposes of this section:
    (1) "Access code" means a series of numbers or letters, unique to each
  banking  customer,  which when entered into an automated teller machine,
  grant the customer entry to the customer's account records.
    (2) "Automated teller machine" means a device, linked to  a  financial
  institution's  account records, which is able to carry out transactions,
  including,  but  not  limited  to:  account  transfers,  deposits,  cash
  withdrawals, balance inquiries, and mortgage and loan payments.
    (3)  "Automated teller machine card" means an instrument authorized by
  a bank which permits a customer to gain access to  an  automated  teller
  machine facility.
    (4)  "Automated  teller  machine facility" means the area comprised of
  one or more automated teller machines, and any adjacent space  which  is
  made available to banking customers after regular banking hours.
    (5) "Bank" means any banking corporation, as defined in section 11-640
  of  the  code,  which  operates,  owns,  or controls an automated teller
  machine facility in the city of New York.
    (6)  "Adequate  lighting"  with  respect  to  an  open  and  operating
  automated  teller  machine  facility  located  on  an exterior wall of a
  building open to the outdoor air, and any defined  parking  area,  means
  lighting during nighttime hours according to the following standards:
    (i)  a  minimum  of  ten candlefoot power at the face of the automated
  teller machine and extending in an unobstructed direction  outward  five
  feet;
    (ii)  a  minimum  of  two  candlefoot power within fifty feet from all
  unobstructed directions from the face of the automated  teller  machine.
  If such machine is located within ten feet of the corner of the building
  and  the  automated teller machine facility is generally accessible from
  the adjacent side, there shall be a  minimum  of  two  candlefoot  power
  along  the  first  forty  unobstructed  feet of the adjacent side of the
  building.
    With respect to defined parking areas,  "adequate  lighting"  means  a
  minimum  of  two  candlefoot  power  in that portion of the parking area
  within sixty feet of the automated teller machine facility.
    With respect to an automated teller machine  facility  located  within
  the  interior  of  a  building, "adequate lighting" means lighting, on a
  twenty-four hour basis, which permits a person entering the facility  to
  readily  and  easily  see all persons occupying such facility, and which
  permits a person inside the facility  to  readily  and  easily  see  all
  persons at the entry door of such facility.
    (7) "Defined parking area" means that portion of any parking area open
  for  bank  customer parking which is (i) contiguous to any paved walkway
  or sidewalk within fifty feet of an automated teller  machine  facility;
  (ii)  regularly,  principally  and lawfully used for parking by users of
  the automated teller machine facility while conducting  transactions  at
  such automated teller machine facility during nighttime hours; and (iii)
  owned  or  leased  by  the  operator  of  the  automated  teller machine
  facility, or owned or otherwise controlled  by  the  party  leasing  the
  automated  teller  machine  facility site to the operator. The term does
  not include any parking area which is not open  or  regularly  used  for
  parking  by the users of the automated teller machine who are conducting
  automated teller machine transactions during nighttime hours. A  parking
  area  is not open if it is physically closed to access or if conspicuous
  signs indicate that it is closed.
    (8) "Nighttime hours" means the period of time beginning at sunset and
  ending at sunrise.

    (9) "Candlefoot power" means the  light  intensity  of  candles  on  a
  horizontal  plane  at thirty-six inches above ground level and five feet
  in front of the area to be measured.
    (10)  "Regular  banking  hours"  means  the period of time during each
  weekday, Monday through Friday, commencing  at  nine  o'clock  a.m.  and
  ending at three o'clock p.m.
    b.  Security  measures.  A  bank shall maintain the following security
  measures  with  respect  to  each  of  its  automated   teller   machine
  facilities:
    (1)  a surveillance camera or cameras, which shall view and record all
  persons entering, exiting, and  moving  within  or  about  an  automated
  teller  machine  facility  located within the interior of a building, or
  which shall view and record all activity occurring within a  minimum  of
  three  feet  in  front  of  an  automated  teller  machine located on an
  exterior wall of a building open to the  outdoor  air.  Such  camera  or
  cameras  need  not  view  and  record  banking  transactions made at the
  automated teller machine. The recordings made by such cameras  shall  be
  preserved by the bank for at least thirty days;
    (2)  within  six  months  after  the  submission  of the report of the
  temporary task force required by subdivision c of  this  section,  entry
  doors  equipped with locking devices which permit entry to such facility
  only to persons using an automated teller machine card  or  access  code
  issued by a bank for that purpose. Provided, however, that any automated
  teller  machine  facility located within the interior of a building that
  is not equipped with such entry door locking devices within  six  months
  after  the  submission of such report shall thereafter have at least one
  security guard stationed therein during the period of time after regular
  banking hours when such automated teller machine facility  is  available
  to banking customers;
    (3)  entry  doors  equipped with fire exit bolts pursuant to paragraph
  two of subdivision k of section 27-371 of the code;
    (4) adequate lighting;
    (5) at least one exterior wall made substantially of untinted glass or
  other untinted, transparent material,  which  provides  an  unobstructed
  view  of  the  automated teller machine or machines within the automated
  teller machine facility;
    (6) reflective mirrors or surfaces at each  automated  teller  machine
  which provide the user a rear view;
    (7)  a reflective mirror or mirrors placed in a manner which permits a
  person present in the automated teller machine facility  to  view  areas
  within such facility which are otherwise concealed from plain view; and
    (8) a clearly visible sign, which at a minimum, states:
    (i) the activity within the automated teller machine facility is being
  recorded by surveillance camera;
    (ii) customers should close the entry door completely upon entering if
  the  automated teller machine facility is located within the interior of
  a building;
    (iii) customers should not permit entrance to any  unknown  person  at
  any  time  after  regular banking hours when an automated teller machine
  facility located within the interior  of  a  building  is  available  to
  banking customers;
    (iv)  customers should place withdrawn cash securely upon their person
  before exiting the automated teller machine facility; and
    (v) complaints concerning security in  the  automated  teller  machine
  facility  should be directed to the bank's security department or to the
  department of consumer affairs, together with telephone numbers for such
  complaints.  Where  emergency  assistance  is  needed  due  to  criminal
  activity  or medical emergency, call 911 at the nearest available public

  telephone. Paragraphs two, three, five and  seven  of  this  subdivision
  shall  not  apply to any automated teller machine facility located on an
  exterior wall of a building open to the outdoor air.
    Paragraph  five  of  this subdivision shall not apply to any automated
  teller machine facility located in (i) a landmark building or within  an
  historic  district,  if compliance with paragraph five would require the
  approval of the landmarks preservation commission, and such approval has
  been sought and  denied;  or  (ii)  any  building,  if  compliance  with
  paragraph  five  would  require  the  removal  of a load-bearing wall as
  defined in section 27-232 of the code.
    c. Temporary task force. There is hereby established a temporary  task
  force  to  advise  the  mayor  and  the  council as to the technological
  feasibility of the limited access entry door requirements  of  paragraph
  two of subdivision b of this section. Such task force shall be comprised
  of   fifteen   members,   two   of  whom  shall  be  representatives  of
  federally-chartered banks, two  of  whom  shall  be  representatives  of
  state-chartered  banks,  and  two  of  whom  shall be representatives of
  savings and loan associations. The mayor and the  speaker  of  the  city
  council  shall  each  appoint  seven members; the chair of the temporary
  task force shall be jointly appointed by the mayor and the speaker.  Not
  later than twelve months after the appointment of the last member of the
  temporary  task  force,  the task force shall submit a report containing
  its conclusions to the mayor and the city council.
    d. List of facilities. Any bank which  operates  an  automated  teller
  machine  facility  shall  file a list of such facilities with the police
  department, the department of consumer affairs, and  the  department  of
  buildings,  including  the street addresses, intersecting streets, hours
  of operation, method of security, and method  of  surveillance  at  each
  facility,  and  the  telephone number of the bank's security department.
  The police department shall distribute to each police precinct a list of
  all automated teller  machine  facilities  in  the  precinct  which  are
  available to banking customers.
    e.  Violations  and  penalties. (1) A bank found to be in violation of
  any provision of subdivision b of this section shall  be  subject  to  a
  civil penalty of not more than two hundred fifty dollars. Each violation
  of  any  provision  of  subdivision  b of this section with respect to a
  particular automated teller  machine  facility  shall  be  considered  a
  separate violation thereof.
    (2)  Any bank found to be in violation of any provision of subdivision
  b of this section shall correct the violation within  three  days  after
  such  finding.  Failure to correct the violation within three days after
  such finding shall subject the bank to a civil penalty of not less  than
  five hundred dollars or more than one thousand dollars and an additional
  civil  penalty  of  two  hundred fifty dollars per day for each day such
  violation continues.
    (3) Any bank found to be in violation of subdivision h of this section
  shall be liable for a civil  penalty  of  not  more  than  one  thousand
  dollars  for  each  automated teller machine facility for which a report
  has not been filed. Any bank which makes a material false  statement  or
  material  omission in any report filed pursuant to subdivision h of this
  section shall be liable for a  civil  penalty  of  not  more  than  five
  thousand dollars for each report.
    (4) A proceeding to recover any civil penalty authorized to be imposed
  pursuant  to  this section shall be commenced by the service of a notice
  of violation which shall be returnable to the commissioner  of  consumer
  affairs.  Such  commissioner,  after due notice and an opportunity for a
  hearing, shall be authorized to impose the civil penalties prescribed by
  this section.

    f.  Consumer  safety  information.  Upon  the  original  issuance   or
  reissuance  of an automated teller machine facility access card or code,
  or any other means or device permitting access to  an  automated  teller
  machine  facility,  the  issuing  bank  shall  provide its customer with
  written  information  concerning safety precautions to be employed while
  using an automated teller machine  facility.  Such  written  information
  shall  include  at  a minimum the information described in subparagraphs
  (i) through (v) of paragraph eight of subdivision b of this section.  In
  addition,  upon  the  effective  date  of the local law which added this
  section and for one year thereafter, such written information shall also
  include a statement indicating that notwithstanding efforts to  restrict
  access  to  an  automated  teller  machine  facility  located within the
  interior of a building to persons authorized to use an automated  teller
  machine  card  or access code, entrance is sometimes obtained by persons
  who are not authorized to use the automated teller machine facility.
    g. Enforcement; statistics. (1) The police department, the  department
  of consumer affairs, and the department of buildings shall be authorized
  to enforce this section.
    (2)  Statistics  of crimes associated with the use of automated teller
  machines compiled and maintained by the police department shall be  made
  available upon the request of any bank.
    (3) Notwithstanding the provisions of section six hundred sixty-six of
  the charter, a notice of violation issued by the department of buildings
  pursuant  to this section shall not be subject to review by the board of
  standards and appeals.
    h. Certification of compliance. Within thirty days after the effective
  date  of  the  local  law  which  added  this  section,  and  each  year
  thereafter,  every  bank  which has an automated teller machine facility
  which is  in  operation  on  such  date  or  on  such  date  every  year
  thereafter,  shall  submit  a  written  report  to  the  commissioner of
  buildings, on a form prescribed by such  commissioner,  certifying  that
  such  automated  teller  machine  facility  is  in  compliance  with the
  provisions of this section, or if such facility  is  not  in  compliance
  with  the provisions of this section, such report shall state the manner
  in which such facility fails to meet the requirements  of  this  section
  and  the  reasons  for  such  non-compliance.  Each such report shall be
  accompanied by a fee of one hundred dollars for  each  automated  teller
  machine facility operated by the bank.
    i.  Compliance  with building code and all other applicable provisions
  of law. Nothing contained in this section shall be construed  to  exempt
  or  relieve  any bank from complying with all relevant provisions of the
  building code and all other applicable provisions of law.
    j. Exemptions. The provisions of this section shall not apply  to  any
  unenclosed  automated  teller machine located in any building, structure
  or space whose primary purpose  or  function  is  unrelated  to  banking
  activities,  including  but  not  limited  to supermarkets, airports and
  school buildings, provided that such automated teller machine  shall  be
  available  for  use  only  during  the regular hours of operation of the
  building, structure or space in which such machine is located.