§ 521-c. Limitation on release of subscriber names. No credit card
registration service shall rent, sell, exchange or otherwise make
available the names, addresses and account numbers of cardholders or
owners of access devices entrusted to it by a credit card or access
device issuer or other financial institution to any other person for use
in direct mail marketing or solicitation without prior written approval
of the cardholder or access device owner. Notwithstanding the foregoing,
nothing in this section shall be construed to restrict a card issuer's
use of its own cardholder list.