Protection of credit card account numbers, penalty, exceptions — effective date, applicability

1. No person, other than the cardholder, shall disclose more than the last five digits of a credit card account number on any sales receipt provided to the cardholder for merchandise sold in this state. 2. Any person who knowingly violates this section is guilty of an infraction and any second or subsequent violation of this section is a class A misdemeanor. 3. It shall not be a violation of * subsection 1 of this section if: (1) The sole means of recording the credit card number is by handwriting or, prior to January 1, 2005, by an imprint of the credit card; and (2) For handwritten or imprinted copies of credit card receipts, only the merchant's copy of the receipt lists more than the last five digits of the account number. 4. This section shall become effective on January 1, 2003, and applies to any cash register or other machine or device that prints or imprints receipts of credit card transactions and which is placed into service on or after January 1, 2003. Any cash register or other machine or device that prints or imprints receipts on credit card transactions and which is placed in service prior to January 1, 2003, shall be subject to the provisions of this section on or after January 1, 2005.