§ 520-a. Certain credit and debit card transaction forms required. 1.
Any person, firm, partnership, association or corporation which issues
forms used for credit or debit card transactions between the credit card
or debit card holder and seller, shall only issue such credit or debit
card forms, except for such forms utilized for a special purpose
incidental but related to the actual purchase and sale agreement
including but not limited to shipping, delivery or installment of
purchased merchandise or special orders, which:

a. are carbonless; or

b. after the transaction is complete, do not render a separate piece
of paper, carbon or otherwise, which readily identifies the cardholder
by name or number, other than those necessary for use by the seller,
credit or debit card holder and issuer to complete the credit or debit
card transaction.

2. Any person, firm, partnership, association or corporation which
accepts credit or debit cards used for credit or debit card transactions
between the credit card or debit card holder and seller, shall only use
credit or debit card forms except for such forms utilized for a special
purpose incidental but related to the actual purchase and sale agreement
including but not limited to shipping, delivery or installment of
purchased merchandise or special orders, which:

a. are carbonless; or

b. after the transaction is complete, do not render a separate piece
of paper, carbon or otherwise, which readily identifies the cardholder
by name or number, other than those necessary for use by the seller,
credit card or debit card holder and issuer to complete the credit or
debit card transaction. No person, firm, partnership, association or
corporation which accepts credit or debit cards for the transaction of
business shall be deemed to have violated the provisions of this
subdivision, if such person, firm, partnership, association or
corporation shows by a preponderance of evidence that the violation was
not intentional and resulted from bona fide error made notwithstanding
the maintenance of procedures reasonably adopted to avoid any such
error.

3. No person, firm, partnership or corporation which accepts credit or
debit cards for the transaction of business shall require the credit or
debit card holder to write on the credit or debit card transaction form,
nor shall it write or cause to be written on such form or on any
attachment thereto, any personal identification information, including
but not limited to the credit or debit card holder's address or
telephone number, that is not required by the credit or debit card
issuer to complete the credit or debit card transaction; provided,
however, that the credit or debit card holder's address and telephone
number may be required on such form or attachment thereto where (i) such
information is necessary for shipping, delivery or installation of
purchased merchandise or for special orders; or (ii) the person, firm,
partnership or corporation processes credit or debit card transactions
by mailing transaction forms to a designated bankcard center for
settlement.

4. No person, firm, partnership, association or corporation which
accepts a personal check, gift certificate, traveler's check or money
order in payment for goods or services used or bought for use primarily
for personal, family or household purposes, and which as a condition of
such acceptance requires that the check drawer or redeemer of the gift
certificate, traveler's check or money order provide a credit or charge
card, shall record on such check, gift certificate, traveler's check or
money order or elsewhere, the card account number. Nothing in this
subdivision shall be construed to prohibit any person, firm,
partnership, association or corporation, as a condition for the
acceptance of a check, gift certificate, traveler's check or money order
in payment for goods or services from: (i) requesting a purchaser to
display a credit or charge card as a means of identification, or as an
indication of credit worthiness or financial responsibility; or (ii)
recording on the check, gift certificate, traveler's check or money
order the type of credit or charge card so displayed and/or the credit
or charge card expiration date; provided, further, that nothing in this
subdivision shall require any business entity to accept a check, gift
certificate, traveler's check or money order in payment for goods or
services whether or not a credit or charge card is displayed.

4-a. a. No person, firm, partnership, association, limited liability
company, corporation, or other entity that accepts charge, credit, or
debit cards for the transaction of business shall print the expiration
date of the charge, credit, or debit card nor shall any person, firm,
corporation, partnership, association, limited liability company, or
other entity print more than the last five digits of the charge, credit,
or debit card account number upon any receipt provided to the card
holder.

b. This subdivision shall apply only to receipts that are
electronically printed and shall not apply to transactions in which the
sole means of recording the person's charge, credit, or debit card
number is by handwriting or by an imprint or copy of the credit card.

c. The provisions of this subdivision shall apply to all cash
registers or other machines or devices, which electronically print
receipts for charge, credit, or debit card transactions, that are placed
in service on or after January first, two thousand four.

d. For all cash registers or other machines or devices that
electronically print receipts for charge, credit, or debit card
transactions in service prior to January first, two thousand four, the
provisions of this subdivision shall not apply until January first, two
thousand seven.

e. A person, firm, corporation, partnership, association, limited
liability company, or other entity who violates this subdivision shall
be given notice with specificity of such violation and be granted two
weeks to correct such violation in its entirety. If such violation is
not corrected in its entirety at the end of such two-week period, the
violation shall be punishable by a civil penalty of five hundred
dollars, and the violator shall be granted an additional one week in
which to correct such violation in its entirety. If such violation is
not corrected in its entirety at the end of such one-week period, such
violation shall be punishable by a civil penalty of one thousand dollars
per week until such violation is corrected in its entirety. The
aggregate penalties imposed on an individual person, firm, corporation,
partnership, association, limited liability company, or other entity for
violations of this subdivision shall not exceed four thousand five
hundred dollars for violations occurring on the same premises.

5. A violation of subdivision one of this section shall be punishable
by a civil fine not to exceed one thousand dollars. A violation of
subdivision two, three, or four of this section, if such violation
constitutes the first such offense by such person shall be punishable by
a civil fine not to exceed two hundred fifty dollars. The second offense
and any offense committed thereafter shall be punishable by a civil fine
not to exceed one thousand dollars.

6. Whenever there shall be a violation of this section an application
may be made by the attorney general in the name of the people of the
state of New York to a court or justice having jurisdiction by a special
proceeding to issue an injunction, and upon notice to the defendant of
not less than five days, to enjoin and restrain the continuance of such
violation; and if it shall appear to the satisfaction of the court or
justice that the defendant has, in fact, violated this section, an
injunction may be issued by the court or justice, enjoining and
restraining any further violations, without requiring proof that any
person has, in fact, been injured or damaged thereby. In any such
proceeding, the court may make allowances to the attorney general as
provided in paragraph six of subdivision (a) of section eighty-three
hundred three of the civil practice law and rules, and direct
restitution. In connection with any such proposed application the
attorney general is authorized to take proof and make a determination of
the relevant facts and to issue subpoenas in accordance with the civil
practice law and rules.