It's not very smart of the mall security guy to pass all that info in the clear but there is no rule, FCC or otherwise about it. More common sense.
The mall guy seems to think he is using a secure communication device when he is not. Believe it or not, this is pretty normal, and the reason why the real rule is that you should not repeat any confidential information you hear by scanning. And you will hear lots if you scan regularly.
I would not provide your social security number and bank pin to the mall security guy.
Mark
WS1095/536/436/996P2/HP1e/HP2e/996XT/325P2/396XT/PRO668/PSR800/PRO652