39 C.F.R. § 501.13 Reporting and Communications.
Title 39 - Postal Service
(a) For purposes of this section, “manufacturer” refers to the authorized postage meter manufacturer in §501.1 and its foreign affiliates, subsidiaries, assigns, dealers, independent dealers, employees, and parent corporations. (b) Each authorized meter manufacturer in §501.1 must submit a preliminary report to notify the Postal Service promptly (in no event more than 21 calendar days of discovery or 21 calendar days from June 30, 1995) of the following: (1) All findings or results of any testing known to the manufacturer concerning the security or revenue protection features, capabilities, or failings of any meters sold, leased, or distributed by the manufacturer that have been approved for sale, lease, or distribution by the Postal Service or any foreign postal administration; or have been submitted for approval by the manufacturer to the Postal Service or other foreign postal administration(s). (2) All potential security weaknesses or methods of meter tampering of the meters that the manufacturer distributes of which the manufacturer knows or should know, and the meter or model subject to each method. These potential security weaknesses include but are not limited to suspected equipment defects, suspected abuse by a meter licensee or manufacturer employee, suspected security breaches of the Computerized Remote Postage Meter Resetting System, occurrences outside normal performance, or any repeatable deviation from normal meter performance (within the same model family and/or by the same licensee). (c) Within 45 days of the preliminary notification of the Postal Service under §501.13(b), the manufacturer must submit a written report to the Postal Service. The report must include the circumstances, proposed investigative procedure, and the anticipated completion date of the investigation. The manufacturer must also provide periodic status reports to the Postal Service during subsequent investigation and, on completion, must submit a summary of the investigative findings. (d) The manufacturer must establish and adhere to timely and efficient procedures for internal reporting of potential security weaknesses. The manufacturer is required to submit a copy of internal reporting procedures and instructions to the Postal Service for review. (e) Authorized postage meter manufacturers and distributors, and their agents and employees, must not intentionally misrepresent to customers of the Postal Service decisions, actions, or proposed actions of the Postal Service respecting its regulation of postage meters in the United States. The Postal Service reserves the right to suspend and/or revoke the authorization to manufacture and/or distribute postage meters throughout the United States or in any part thereof under §501.5 when the manufacturer, distributor, or agent or employee of either fails to comply with this requirement. [60 FR 30726, June 9, 1995, as amended at 70 FR 1349, Jan. 7, 2005]
Title 39: Postal Service
PART 501—AUTHORIZATION TO MANUFACTURE AND DISTRIBUTE POSTAGE METERS
§ 501.13 Reporting and Communications.
