(a) The finance commission and the Credit Union Commission shall enforce this subchapter and adopt rules to implement this subchapter.
(b) The rules must establish security requirements to be implemented by a financial institution for the operation of an unmanned teller machine. The rules may require the financial institution to install and maintain security devices in addition to those required by this subchapter to be operated in conjunction with the machine for the protection of customers using the machine, including:
(1) video surveillance equipment that is maintained in working order and operated continuously during the hours of operation of the machine; and
(2) adequate lighting around the premises that contain the machine.

(b-1) The rules may provide for a system that enhances customer security, taking into account emerging technologies, the availability of networks to exchange information, and the potential compliance costs for financial institutions and other unmanned teller machine service providers.
(c) A financial institution that violates a rule adopted under this section is subject to a civil penalty of not less than $50 or more than $1,000 for each day of violation and each act of violation.