Credit card lists prohibited; penalty.

(1) It is unlawful for any person, business, corporation, partnership, or other agency to make available, lend, donate, or sell any list or portion of a list of any credit card subscribers and their addresses and account numbers to any third party without the express written permission of the issuer and the subscribers; except that a credit card issuer may make a list of its cardholders, including names, addresses, and account numbers, available, without the permission of the subscribers, to a third party pursuant to a contract, if such contract contains language requiring the third party to bind through contract each of its subcontractors by including language prohibiting the divulging of any part of the list for any purpose by the subcontractors except to fulfill and service orders pursuant to the contract between the credit card issuer and the authorized third party. However, notwithstanding any contrary provision of this section, a “consumer reporting agency,” as that term is defined by the Fair Credit Reporting Act, Pub. L. No. 91-508, may provide lists of credit account names, addresses, and account numbers to third parties pursuant to the provisions of that act. Nothing herein shall make unlawful or otherwise prohibit the transmittal of any such information to or from a “consumer reporting agency,” as that term is defined in the Fair Credit Reporting Act, or a “debt collector,” as that term is defined in the Fair Debt Collection Practices Act, Pub. L. No. 95-109. Notwithstanding the provisions of this section:

(a) A corporation may make available, lend, donate, or sell any list or portion of a list of any credit card subscribers and their addresses and account numbers to a subsidiary or the parent corporation of such corporation or to another subsidiary of the common parent corporation; and

(b) Any business entity may lawfully obtain the names, addresses, and account numbers of its own customers. Such information may only be maintained to serve the needs of its customers for its own promotional or marketing purposes.

(2) A violator of this section is subject to the penalties set forth in s. 817.67(1).