Relating to the search of certain wireless communications devices by a peace officer.

Contracts

• Security & Maintenance Vendors: Review Master Service Agreements (MSAs) with third-party POS maintenance and security vendors. Amend Standard Operating Procedures (SOPs) to ensure that when vendors discover a skimmer, they treat it as evidence subject to immediate warrantless search, rather than a privacy-protected device.

Hiring/Training

• Loss Prevention & Site Managers: Update training modules for staff who physically inspect terminals (e.g., gas pumps, ATMs). They must understand that unlike a lost customer cell phone, a skimming device has no privacy protection under this statute.
• Law Enforcement Interaction: Train managers to explicitly request immediate analysis of the device when handing it over to responding officers, citing the exception in SB1497.

Reporting & Record-Keeping

• Incident Response Logs: Because police can now access device data immediately, the timeline for identifying compromised customer data is accelerated. Update your Incident Response Plan to require immediate acquisition of the police Case Number to track the forensic results of the skimmer analysis.

Fees & Costs

• No Direct Costs: There are no new government fees associated with this bill.
• Potential Savings: Faster police access to skimmer data may reduce the window of exposure for data breaches, potentially lowering liability and notification costs.