If they answer yes, then ask, 'How are you making sure that...

If they answer yes, then ask, 'How are you making sure that my information is being protected?' If you don't like the answer, take your business to another financial institution.