Is there any law, regulation, etc in IN that prohibits a bank from using a customer's social security number as the logon password for internet banking access? There doesn't seem to be any prohibition on the federal level, but I don't know about the state level.
While I know it's not the best practice, we have some system limitations, so I think we're stuck with it unless it's actually prohibited by IN laws.