N.Y. General Business Law § 521-c: Limitation on release of subscriber names

§ 521-c. Limitation on release of subscriber names. No credit card

registration service shall rent, sell, exchange or otherwise make

available the names, addresses and account numbers of cardholders or

owners of access devices entrusted to it by a credit card or access

device issuer or other financial institution to any other person for use

in direct mail marketing or solicitation without prior written approval

of the cardholder or access device owner. Notwithstanding the foregoing,

nothing in this section shall be construed to restrict a card issuer's

use of its own cardholder list.