Is a financial institution required to print the full account number on customer account statements, or may we use an "x" for all but the last few digits? We want to do this for security reasons to prevent fraudulent use of account numbers on statements stolen from mailboxes.