30-14-1721. Identity theft impediments -- credit cards -- definition. (1) A credit card issuer that mails an offer or solicitation to receive a credit card and, in response, receives a completed application for a credit card that lists an address that is different from the address on the offer or solicitation shall verify the change of address by contacting the person to whom the solicitation or offer was mailed, as provided in 30-14-1722.
     (2) Notwithstanding any other provision of law, a person to whom an offer or solicitation to receive a credit card is made is not liable for the unauthorized use of a credit card issued in response to that offer or solicitation if the credit card issuer does not verify the change of address pursuant to subsection (1) prior to the issuance of the credit card unless the credit card issuer proves that this person actually incurred the charge on the credit card.
     (3) When a credit card issuer receives a written or oral request for a change of the cardholder's billing address and then receives a written or oral request for an additional credit card within 10 days after the requested address change, the credit card issuer may not mail the requested additional credit card to the new address or, alternatively, activate the requested additional credit card unless the credit card issuer has verified the change of address.
     (4) (a) Except as provided in subsections (4)(b) through (4)(d), a person, firm, partnership, association, corporation, or limited liability company that accepts credit cards for the transaction of business may not print more than the last five digits of the credit card account number or the expiration date upon any receipt provided to the cardholder.
     (b) Subsection (4)(a) applies only to receipts that are electronically printed and does not apply to transactions in which the sole means of recording the person's credit card number is by handwriting or by an imprint or copy of the credit card.
     (c) Subsection (4)(a) applies beginning January 1, 2008, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is in use before January 1, 2005.
     (d) Subsection (4)(a) applies beginning January 1, 2006, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is first put into use on or after January 1, 2005.
     (5) (a) As used in this section, "credit card" means any card, plate, coupon book, or other single credit device existing for the purpose of being used from time to time upon presentation to obtain money, property, labor, or services on credit.
     (b) "Credit card" does not mean any of the following:
     (i) any single credit device used to obtain telephone property, labor, or services in any transaction with an entity under regulation as a public utility;
     (ii) any device that may be used to obtain credit pursuant to an electronic funds transfer, but only if the credit is obtained under an agreement between a consumer and a financial institution to extend credit when the consumer's asset account is overdrawn or to maintain a specified minimum balance in the consumer's asset account;
     (iii) any key or card key used at an automated dispensing outlet to obtain or purchase petroleum products that will be used primarily for business rather than personal or family purposes.

     History: En. Sec. 2, Ch. 518, L. 2005.