Our internal auditors examined our bank’s ACH agreements with employees (for direct deposit of their paychecks) and asked us to add language that would explain what steps are required to revoke the ACH authorization. Do the NACHA rules require us to add that language to our ACH agreements?

We agree with your internal auditors that your direct deposit ACH authorization forms should include information on revoking an authorization. That said, it is up to you to determine the method by which your employees should revoke (or change) their authorizations. The NACHA rules require that every ACH authorization include language stating that “the Receiver may revoke the authorization only by notifying the Originator in the time and manner stated in the authorization.” Section 2.3., Subsection 2.3.2.3(c). However, note that authorizations for credit entries into consumer accounts need not be in writing. Section 2.3, Subsection 2.3.2.1.