Michigan Compiled Laws, Chapter 490. Credit Unions § 490.408

Sec. 408. (1) A domestic credit union that utilizes automated information processing services of a vendor must enter into a written contract, lease, or licensing agreement with the vendor for those services. The credit union board shall review the contract, lease, or licensing agreement to ensure the interests of the domestic credit union are protected. Approval of the contract, lease, or licensing agreement by the credit union board or its designee is required before any automated information processing services are performed or provided to the domestic credit union.

(2) A domestic credit union that utilizes the services of a vendor under subsection (1) retains permanent and exclusive ownership of all internal information and member information in the possession of the vendor. The vendor shall not disclose any of that information to third parties except as explicitly authorized in writing by the domestic credit union; the vendor shall not use any of that information for the vendor's own purposes except as explicitly authorized in writing by the domestic credit union; and if the vendor or any subcontractor of the vendor has access to any member information, the vendor or that subcontractor are subject to regulation and examination by the director.

(3) As used in this section: