It shall be unlawful for an initial merchant to disclose a credit card, debit card, bank account, or other financial account number, or to disclose other billing information that is used to charge a customer of the initial merchant, to any post-transaction third party seller for use in an Internet-based sale of any goods or services from that post-transaction third party seller.
Nothing in this chapter shall be construed to supersede, modify, or otherwise affect the requirements of the Electronic Funds [1] Transfer Act (15 U.S.C. 1693 et seq.) or any regulation promulgated thereunder.
The term “initial merchant” means a person that has obtained a consumer’s billing information directly from the consumer through an Internet transaction initiated by the consumer.