Answer:
If your IM communications are strictly internal, there's only the risk that the software could house some kind of Trojan that leaks NPPI to the outside world. If you want to use IM to communicate with customers, then all the usual regulatory risks apply and you may not be able to document what communications actually transpired.
First published on BankersOnline.com 6/12/06