Who can get credit cardholder lists

(1) It is unlawful for any person, business, corporation, partnership, or other agency to make available, lend, donate, or sell any list or portion of a list of any credit cardholders and their addresses and account numbers to any third party without the express written permission of the issuer and the cardholders; except that a credit card issuer may make a list of its cardholders, including names, addresses, and account numbers, available, without the permission of the cardholders, to a third party pursuant to a contract, if the contract contains language requiring the third party to bind through contract each of its subcontractors by including language prohibiting the divulging of any part of the list for any purpose by the subcontractors except to fulfill and service orders pursuant to the contract between the credit card issuer and the authorized third party. Notwithstanding any contrary provision of this section, a "consumer reporting agency", as that term is defined by the Fair Credit Reporting Act, Public Law No. 91-508, may provide lists of credit account names, addresses, and account numbers to third parties pursuant to that Act. Nothing in this section shall make unlawful or otherwise prohibit the transmittal of any such information to or from a "consumer reporting agency", as that term is defined in the Fair Credit Reporting Act, or a "debt collector", as that term is defined in the Fair Debt Collection Practices Act, Public Law No. 95-109. Notwithstanding the provisions of this section, it is lawful for any corporation to make available, lend, donate, or sell any list or portion of a list of any credit cardholders and their addresses and account numbers to a subsidiary or the parent corporation of such corporation or to another subsidiary of the common parent corporation. (2) Violation of this section is a misdemeanor.