NACHA has expanded its existing security framework for the ACH Network to include requiring parties
with large volumes to protect account numbers used in the ACH payment. The account number must be
rendered unreadable anywhere the sender has stored it electronically while not in use.

You can read the NACHA briefing here: End_User_Briefing_Supplementing_Data_Security_FINAL.pdf
(nacha.org)