The Financial Services Modernization Act stipulates additional security conditions for financial data but local storage is not a requirement. Also note that the Act applies only to financial institutions.  