--- title: Nacha's Account Data Security Rule Comes into Effect this Month description: Nacha's new Account Data Security Rule comes into effect as ACH transaction volume is on the rise. image: https://insights.comforte.com/hubfs/blog%20header%20new%20nacha%20requirements%20come%20into%20effect.jpeg --- [![Hubspot\_blog\_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe to comforte Insights](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![new nacha account security requirements come into effect](https://insights.comforte.com/hubfs/blog%20header%20new%20nacha%20requirements%20come%20into%20effect.jpeg)](https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month) [Dan Simmons](https://insights.comforte.com/author/dan-simmons) l Jun 22, 2021 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Compliance](https://insights.comforte.com/tag/compliance) # Nacha's Account Data Security Rule Comes into Effect this Month The extension to the deadline to meet [Nacha’s Rule](https://insights.comforte.com/new-nacha-data-security-requirements-coming-up?hsLang=en) related to protecting Account Numbers in an ACH transaction is upon us - June 30, 2021. This rule already applied to most financial institutions, but now non-financial institutions including Originators, Third-Party Service Providers, and Third-Party Senders have to meet the rule if they had 6-million ACH transactions in 2019. For smaller entities who processed 2 million transactions during 2020, they still have another year until June 30, 2022. What is at stake here is the security of the banking account numbers involved with moving money in or out of a bank account. This means that there are organizations right now who may not be protecting this data. The deadlines have been put in place by Nacha to ensure these transactions have the proper protections. The rule discusses using PCI DSS (Payment Card Industry Data Security Standard) as a guide to how to protect Account Numbers in the same way that Cardholder Data is. The most common approach is to encrypt or [tokenize](https://www.comforte.com/data-security/tokenization) the data so that even if a hacker gains access to the data, they will be unable to read or use the data. Anyone who has a bank account should be happy to know that these security guidelines will be in place for those organizations who have not yet met these security standards. With [Nacha reporting](https://www.nacha.org/news/ach-network-volume-rises-112-first-quarter-two-records-are-set) that in the first quarter of 2021 ACH transaction volume that hit 7.1 billion payments amounting to 17.3 trillion USD, it is clear there is plenty of account data to be protected. ## Data-centric security for Nacha payments Rather than trying to protect the deposit account data with perimeter security, i.e. prevent access to the data source, it is much more elegant and effective to protect the sensitive data element itself. Data-centric security protects the data by tokenizing the data element, rendering it unreadable and useless for any attacker and while complying with the new supplementing data security requirements. [Major retailers](https://www.comforte.com/fileadmin/Collateral/SS_Major_Fashion_Retailer_Chooses_Tokenization.pdf) and financial organizations across the globe are already utilizing data-centric security to secure PANs in accordance with PCI DSS.  --- | Share this: | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/nachas-account-data-security-rule-applies-this-month&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## These are Nacha dad's data protection standards New data protection standards and regulations are emerging all the time. Organizations that want to keep up need agile data protection tools that can easily be extended as new standards require. To learn more, check out our white paper "How Data Security Enables Cross-regulatory Compliance for PSPs" by clicking on the button below: [![Download White Paper](https://no-cache.hubspot.com/cta/default/4026697/c34baf62-2752-42af-b507-bee93aac050e.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/c34baf62-2752-42af-b507-bee93aac050e) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### EMEA comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Asia-Pacific comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### Americas comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Southeast Asia comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026