Credit Card Numbers on Receipts

Last Updated: November 16, 2009

NCSL Staff Contact: Heather Morton, Denver, (303) 364-7700

 

FEDERAL LEGISLATION

Through the Fair and Accurate Credit Transactions Act, Public Law 108-159, Congress preempted the states on credit and debit card truncation to set a national standard. Under Title I, §113 of the Act, only the last five digits of the card account number can be printed on electronically printed receipts provided to the customer. The new truncation requirement does not apply to handwritten receipts or receipts imprinted with a copy of the credit card.

STATE LEGISLATION

States with Enacted Legislation

1999

2000

2001

2002

2003

2004

2005

2006

2007

2008

2009

California

Washington

Arizona

Colorado

Delaware

Kentucky

California

California

 None

Alaska

Nevada

 

 

Louisiana

Florida

Georgia

Maine

North Dakota

 

 

South Carolina

Washington

 

 

 

Kansas

Idaho

Michigan

Tennessee 

 

 

   

 

 

 

Maine

Illinois

Rhode Island

 

 

 

   

 

 

 

Maryland

Missouri

Virginia 

 

 

 

   

 

 

 

Missouri

Nevada

 

 

 

 

   

 

 

 

Nebraska

New Mexico

 

 

 

 

   

 

 

 

New Jersey

New York

 

  

 

 

   

 

 

 

New York

North Carolina

 

 

 

 

   

 

 

 

Ohio

Oregon

 

 

 

 

   
      Oklahoma Texas            

 

 

 

Virginia

 

 

 

 

 

   

 

2009 | 2008 | 2007 | 2006 | 2005 | 2004 | 2003 | 2002 | 2001 | 2000 | 1999

2009 Legislation

Connecticut
H.B. 5391
Prohibits merchant copies of credit card receipts from displaying more than the last four digits of a credit card number.

Nevada
A.B. 389
Signed by governor 5/22/09, Chapter 161
Prohibits a business from printing more than the last five digits of the account number of the card on any copy of the receipt that is retained by the business that accepted the card. Prescribes a civil penalty of $500 for a business that violates these provisions and an additional penalty of $1,000 per week for a business that does not correct the violation. The aggregate amount of civil penalties imposed on a business for violations of these provisions which occur on the same premises must not exceed $4,500. Authorizes the attorney general or a district attorney to: (1) recover the civil penalties in a civil action; and (2) bring an action to enjoin any violation of these provisions. A business that violates any order or injunction issued to enjoin a violation of these provisions is guilty of a gross misdemeanor. Exempts from the applicability of these provisions, from July 1, 2009, to December 31, 2009, a business that does not have the ability to control or adjust the manner in which a receipt is electronically printed. Prohibits a manufacturer or a supplier from providing, selling or leasing a cash register or other machine or device that does not allow a business to comply with these provisions. Authorizes the attorney general or a district attorney to bring an action to enjoin any violation of this provision. A person who violates any order or injunction issued to enjoin a violation of this provision is guilty of a gross misdemeanor.

New Jersey
A.B. 2189
Passed Assembly 5/19/08
S.B. 1837
S.B. 1960
Requires account numbers to be truncated on certain sales receipts.

S.B. 1839
Clarifies that credit card account numbers must be truncated on merchants’ copies of sales receipts. Specifies that the prohibition against printing more than the last five digits of a credit card account number applies to copies of sales receipts retained by the retail sales establishment, in addition to those physically provided to the customer.

S.B. 1948
Amends §1 of P.L.2002, c.101 (C.56:11-42) to prohibit a retail sales establishment from electronically printing more than the last five digits of a customer's debit card account number, or the expiration date of the customer's debit card, upon any sales receipt provided to the customer at the point of sale, except for any sales receipt in which the sole means of recording the customer's debit card number is by handwriting or by an imprint or copy of the customer's debit card.

New York
A.B. 1693
Ensures that account numbers are not printed on receipts from banks; prohibits more than the first five numbers of the bank account number or credit/debit card number from being printed on the receipt for any financial transaction conducted with the bank; sets forth penalties.

Pennsylvania
H.B. 334
Prohibits certain credit and debit card information on receipts.

Washington
H.B. 1127
Signed by governor 5/7/09, Chapter 382
Provides that a person that accepts credit cards or debit cards for the transaction of business may not print more than the last five numbers of an account number or print the expiration date on an electronic receipt that is retained by the person or is provided to the cardholder. This restriction does not apply if the means of recording the number is by imprint or handwriting. A retailer that accepts credit cards or debit cards for the transaction of business may not print more than the last five numbers of an account number or print the expiration date on an electronic receipt that is retained by the person or is provided to the cardholder. This restriction does not apply if the means of recording the number is by imprint or handwriting or if the retailer processes the transaction electronically but takes additional manual measures to ensure that the card is not used fraudulently, including measures that the retailer is contractually obligated to take in connection with accepting a credit or debit card.

 

 

2008 Legislation

Alaska
H.B. 65
Signed by governor 6/13/08, Chapter 92
Provides that a person who accepts credit cards or debit cards for the transaction of business may not print more than the last five digits of the card number or the expiration date on any receipt provided to the cardholder at the point of the sale or transaction.

Colorado
S.B. 72
Postponed indefinitely 1/30/08
Includes handwritten credit card receipts and credit card receipts where a credit card number is recorded by imprint or copy of the credit card in the prohibition against disclosing more than the last five digits of a credit card account number or the expiration date of a credit card on a credit card receipt. Deletes obsolete transition provisions from the laws regarding credit card receipts.

New Jersey
A.B. 2189
Passed Assembly 5/19/08
S.B. 1837
S.B. 1960
Requires account numbers to be truncated on certain sales receipts.

A.B. 2191
Combined with A.B. 2189 5/5/08
Amends §1 of P.L.2002, c.101 (C.56:11-42) to prohibit a retail sales establishment from electronically printing more than the last five digits of a customer's debit card account number, or the expiration date of the customer's debit card, upon any sales receipt provided to the customer at the point of sale, except for any sales receipt in which the sole means of recording the customer's debit card number is by handwriting or by an imprint or copy of the customer's debit card. This bill provides a fine up to $1,000 for violations, if they are due to negligence.

S.B. 1839
Clarifies that credit card account numbers must be truncated on merchants’ copies of sales receipts. Specifies that the prohibition against printing more than the last five digits of a credit card account number applies to copies of sales receipts retained by the retail sales establishment, in addition to those physically provided to the customer.

S.B. 1948
Amends §1 of P.L.2002, c.101 (C.56:11-42) to prohibit a retail sales establishment from electronically printing more than the last five digits of a customer's debit card account number, or the expiration date of the customer's debit card, upon any sales receipt provided to the customer at the point of sale, except for any sales receipt in which the sole means of recording the customer's debit card number is by handwriting or by an imprint or copy of the customer's debit card.

New York
A.B. 5018
Ensures that account numbers are not printed on receipts from banks; prohibits more than the first five numbers of the bank account number or credit/debit card number from being printed on the receipt for any financial transaction conducted with the bank; sets forth penalties.

South Carolina
S.B. 453
Signed by governor 4/2/08, Act 190
Except as provided, prohibits a person, firm, partnership, association, corporation, limited liability company, or any other entity which accepts credit cards or debit cards for the transaction of business from printing on a receipt provided to the cardholder at the point of sale: more than five digits of the credit card or debit card account number; and the expiration date of the credit card or debit card.

Vermont
H.B. 624
Requires that the merchant's copy of a credit or debit card receipt show a truncated card number.

Virginia
H.B. 1200
Passed by indefinitely 2/5/08
Provides a civil penalty of not more than $2,500 per violation for the improper use of a credit card number.

Washington
H.B. 2620
Passed House 2/4/08
Requires the truncation of credit card and debit card numbers on electronically printed receipts that are provided to cardholders or retained by a business or retailer.

 

 

 

2007 Legislation

Alaska
H.B. 31
Provides that a person who accepts credit cards or debit cards for the transaction of business may not print more than the last five digits of the card number or the expiration date on any receipt provided to the cardholder at the point of the sale or transaction.

H.B. 65
Provides that a person who accepts credit cards or debit cards for the transaction of business may not print more than the last five digits of the card number or the expiration date on any receipt provided to the cardholder at the point of the sale or transaction.

S.B. 21
Provides that a person who accepts credit cards or debit cards for the transaction of business may not print more than the last five digits of the card number or the expiration date on any receipt provided to the cardholder at the point of the sale or transaction.

Indiana
H.B. 1049
Prohibits the printing of: (1) more than the last four digits of a payment card number; or (2) the payment card expiration date; on any receipt electronically generated in a transaction in which a payment card is used to obtain certain property or services. Provides that the prohibition applies to a person that: (1) accepts payment cards for certain transactions; (2) provides processing software or hardware to enable a person to accept payment cards; or (3) owns or operates an automated teller machine. Specifies dates after which cash registers, automated teller machines, and other machines or devices that electronically print receipts must comply with the prohibition. Allows a cardholder who receives a receipt that displays prohibited information to file a complaint with the consumer protection division of the attorney general's office. Allows the division to file a civil action if the division determines that a violation has occurred. Allows the court hearing the matter to award certain relief.

Iowa
S.F. 57
Places restrictions on the information contained on electronically printed credit card receipts. Provides that on or after July 1, 2009, a seller who regularly engages as a seller in credit transactions of the same kind, who accepts credit cards, and who electronically prints receipts for such credit card transactions, shall not print on the receipt provided to the purchaser more than the last five digits of the purchaser's credit card account number or the expiration date of the credit card. The bill provides, however, that the restrictions shall not apply to a credit card transaction in which the sole means of recording the purchaser's credit card number is by handwriting or by an imprint or copy of the credit card. The bill specifies that a violation of the restrictions is a serious misdemeanor. A serious misdemeanor is punishable by confinement for no more than one year and a fine of at least $315 but not more than $1,875.

New Jersey
A.B. 4271
S.B. 2656
Clarifies that credit card account numbers must be truncated on merchants’ copies of sales receipts. Under current law, a retail sales establishment may not electronically print more than the last five digits of a customer's credit card account number or the expiration date of that credit card upon any sales receipt provided at the point of sale to the customer. An exception is made for sales receipts in which the sole means of recording the customer's credit card number is by handwriting or by an imprint or copy of the credit card. This bill specifies that the prohibition against printing more than the last five digits of a credit card account number applies to copies of sales receipts retained by the retail sales establishment, in addition to those physically provided to the customer.

New York
A.B. 5018
Ensures that account numbers are not printed on receipts from banks; prohibits more than the first five numbers of the bank account number or credit/debit card number from being printed on the receipt for any financial transaction conducted with the bank; sets forth penalties.

Oregon
H.B. 3278
Changes allowable number of digits payment system for credit or debit cards may display on customer receipt from five to four. Prohibits creation or retention of record of credit or debit card transaction longer than necessary to obtain payment from card issuer or other person responsible for payment if record contains information about customer other than customer's name and four digits of customer's card number.

S.B. 138
Prohibits creation of paper receipt or record in credit card or debit card transaction that shows more information about customer than customer's name and five digits of customer's credit card or debit card number.

Pennsylvania
H.B. 147
Prohibits certain credit card information on receipts, includes debit card receipts.

South Carolina
H.B. 3938
Provides that as of July 1, 2009, merchants and other persons honoring a credit card for the purchase or lease of goods or services must not include the consumer's credit card number on the printed receipt provided to the consumer.

S.B. 8
Except as provided, prohibits a person, firm, partnership, association, corporation, limited liability company, or any other entity which accepts credit cards or debit cards for the transaction of business from printing on a receipt provided to the cardholder at the point of sale: more than five digits of the credit card or debit card account number; and the expiration date of the credit card or debit card.

S.B. 453
Passed Senate 2/22/07
Except as provided, prohibits a person, firm, partnership, association, corporation, limited liability company, or any other entity which accepts credit cards or debit cards for the transaction of business from printing on a receipt provided to the cardholder at the point of sale: more than five digits of the credit card or debit card account number; and the expiration date of the credit card or debit card.

2006 Legislation

California
S.B. 1699
Signed by governor 9/29/06, Chapter 682
Prohibits printing more than the last five digits of the credit card account number or the expiration date upon any receipt retained by the person, firm, partnership, association, corporation, or limited liability company, which is printed at the time of the purchase, exchange, refund, or return, and is signed by the cardholder or any receipt retained by the entities listed above, which is printed at the time of the purchase, exchange, refund, or return, but is not signed by the cardholder, because the cardholder used a personal identification number to complete the transaction.

Indiana
H.B. 1148
Prohibits: (1) more than the last four digits of a payment card number; or (2) the payment card expiration date; from being printed on any receipt electronically generated in a transaction in which a payment card is used to obtain certain property or services. Provides that the prohibition applies to a person that: (1) accepts payment cards for certain transactions; (2) provides processing software or hardware to enable that person or another person to accept payment cards; or (3) owns or operates an automated teller machine. Specifies dates after which cash registers, automated teller machines, or other machines or devices that electronically print receipts must comply with the prohibition. Allows a cardholder that receives a receipt that displays prohibited information to file a complaint with the consumer protection division of the attorney general's office. Allows the division to file a civil action if the division determines that a violation has occurred. Allows a court hearing the matter to award certain relief.

Massachusetts
H.B. 3693
Prohibits a person or business that accepts debit cards for the transaction of business from printing more than the last five digits of the debit card’s account number or the expiration date upon any receipt provided to the cardholder.

New Jersey
A.B. 2890
Passed Assembly 6/22/06
S.B. 1512
Prohibits electronic printing of certain debit card information on certain sales receipts.

Pennsylvania
H.B. 565
Passed House 1/24/06
Prohibits certain credit card information on receipts provided to the cardholder.

2005 Legislation

Arkansas
H.B. 1030
Withdrawn by sponsor
1/25/05
Provides a penalty for improper display of credit number on receipt.

California
S.B. 802
Signed by governor 9/30/05, Chapter 445
Prohibits a person or business that accepts debit cards for the transaction of business from printing more than the last five digits of the debit card’s account number or the expiration date upon any receipt provided to the cardholder.

Iowa
S.B. 228
Prohibits the printing of credit card numbers and expiration dates on sales receipts and provides a penalty.

Massachusetts
H.B. 3693
Prohibits a person or business that accepts debit cards for the transaction of business from printing more than the last five digits of the debit card’s account number or the expiration date upon any receipt provided to the cardholder.

Michigan
H.B. 4045
Prohibits display of more than last four digits of account number on credit card receipt.

Mississippi
H.B. 930
Died in committee
2/1/05
Prohibits display of more than last four digits of account number on credit card receipt.

New Hampshire
H.B. 188
Inexpedient to legislate 2/15/05
Prohibits sellers from printing more than the last five digits of the account number or the expiration date on credit card receipts. The prohibition does not apply to receipts that are handwritten or created by an imprint of the card.

New Jersey
S.B. 1185
Prohibits sellers from electronically printing more than the last five digits of the account number or the expiration date on credit card receipts. The prohibition does not apply to receipts that are handwritten or created by an imprint of the card.

North Dakota
S.B. 2249
Signed by governor
3/16/05
Relates to restrictions on electronically-printed receipts; receipts for these credit card transactions may not print on the receipt provided to the customer more than the last five digits of the credit card account number nor print on the receipt provided to the customer the expiration date of the credit card. This section does not apply to a credit card transaction in which the sole means of recording the customer's credit card number is by handwriting or by an imprint or copy of the credit card.

Pennsylvania
H.B. 565
Requires that credit card receipts shall not contain the full number and expiration date of a credit card on a receipt.

Rhode Island
H.B. 5161
Passed House
5/10/05
Prohibits the printing of credit card account numbers on sales receipts with respect to any kind of sales transaction.

Tennessee
H.B. 609
S.B. 974
Enacts the "Tennessee Credit and Debit Card Number Identity Theft Prevention Act of 2005" and makes violation thereof a violation of "Tennessee Consumer Protection Act of 1977."

H.B. 1095
Signed by governor
5/13/05, Public Law Chapter 161
S.B. 1843
Prohibits persons who accept credit cards or debit cards from printing receipts that show more than five digits of the card number or the expiration date. This would only apply to electronically printed receipts and would not apply to transactions where a card number must be handwritten, or the card must be imprinted or copied.

2004 Legislation

California
A.B. 3013
Prohibits a credit card issuer from printing more than the last eight digits of the credit card account number on each billing statement provided to a cardholder. Prohibits a credit card issuer from printing the cardholder's account number on the check when endorsing a cardholder's payment check.

Hawaii
H.B. 2940
Prohibits anyone who accepts credit cards for the transaction of business and who prints the transaction receipt electronically from printing on the receipt anything more than the last five digits of the credit card account number and the card expiration date.

S.B. 2083
Restricts reproducing of credit card or Social Security numbers to last four digits or requires use of other characters for identification.

Iowa
H.F. 2221
Prohibits sellers from printing on sales receipts credit card expiration dates and credit card numbers except for the last four digits. This prohibition does not apply to sales receipts that are handwritten or sales receipts that are created by an imprint or copy of the credit card. Violations are punishable as a simple misdemeanor. A simple misdemeanor is punishable by confinement for no more than 30 days or a fine of at least $50 but not more than $500 or by both.

Kentucky
H.B. 7
Signed by governor 4/2/04, Chapter 27
Creates a new section of KRS 434.550 to 434.730 relating to credit and debit cards to require that electronic cash registers and similar machines print not more than the last five digits of the credit or debit card number and do not print the card expiration date on credit and debit card receipts; provides that the Act does not apply to handwritten receipts or to nonelectronic imprints of credit and debit cards; amends 434.560 to define merchant, payment card, reencoder, and scanning device; amends KRS 434.730 to create a Class D felony for using a scanning device or reencoder to gather information encoded on magnetic strip of payment card or place information on the magnetic strip of a different card with intent to defraud authorized user or issuer of card; make subsequent offenses a Class C felony; provides for suppliers of credit or debit card hardware or software to comply with the bill; effective January 1, 2005 for newly installed machines and January 1, 2007 for current machines.

Maine
L.D. 1854
Signed by governor 3/30/04, Chapter 586
Delays for one year the implementation of the law that prohibits businesses from printing more than the last five numbers of a credit card or debit card account on an electronically produced receipt.

Maryland
H.B. 458
Withdrawn from further consideration 2/23/04
Increases from $25 to $100 the civil penalty that may be recovered from a person that accepts a credit card number or other payment device number for the transaction of business and prints more than eight digits of the credit card number or other payment device number on a receipt provided to the holder of the credit card or payment device.

Massachusetts
H.B. 1047
Relates to the printing of credit card numbers in business transactions.

Michigan
H.B. 6175
Passed House
9/29/04
S.B. 220
Signed by governor
12/27/04, Public Act 461
Prohibits the expiration date and full account number from being printed on receipts.

Mississippi
H.B. 1437
Died in committee 3/9/04
Prohibits the display of certain charge, credit and debit card information upon receipts in sales transactions; provides penalties for violations.

New Jersey
S.B. 1185
Amends section 1 of P.L.2002, c.101 (C.56:11-42) to prohibit a retail sales establishment from electronically printing more than the last five digits of a customer’s debit card account number, or the expiration date of the customer’s debit card, upon any sales receipt provided to the customer at the point of sale, except for any sales receipt in which the sole means of recording the customer’s debit card number is by handwriting or by an imprint or copy of the customer’s debit card.

Rhode Island
H.B. 7135
Became effective without governor’s signature
7/1/04, Public Law 238
Establishes liability with respect to the electronic printing of credit card account numbers on sales receipts.

H.B. 7485
Prohibits vendors who accept credit cards from issuing a receipt to the credit card holder which lists more than five numbers from the cardholder’s credit card account number.

S.B. 2105
Became effective without governor’s signature 6/30/04, Public Law 211
Establishes liability with respect to the electronic printing of credit card account numbers on sales receipts.

South Dakota
H.B. 1279
Limits the information printed on an electronic credit card or debit card receipt and provides for a civil cause of action for failure to comply with the provisions of this Act.

Virginia
H.B. 537
Signed by governor 4/14/04, Chapter 793
Changes the deadline for old devices to comply with the prohibition on printing certain information on receipts from July 1, 2007, to July 1, 2005. Changes the prohibition of displaying certain information on payment device receipts from no more than the last five digits to no more than the last four digits. Extends the prohibition to handwritten, imprinted and copied payment device numbers, except for the one original. Allows compliance by returning noncomplying copies to or destroying them in front of the payment device user. References to credit cards and debit cards were removed because the Congress pre-empted the law’s application to credit card and debit card receipts with the reauthorization of the Fair Credit Reporting Act. See 15 U.S.C. 1681c(g) and 1681t(b)(5)(A).

2003 Legislation

Delaware
S.B. 11
Signed by governor 7/15/03, Chapter 151
Requires credit and debit card receipts to contain no more than five digits of the account number.  Credit and debit card takers in business before January 1, 2004 have until January 1, 2005 to comply.  It applies immediately to all those who begin to accept credit or debit cards on or after January 1, 2004.  The penalty is an unclassified misdemeanor (up to 30 days and up to a $575 fine), and the Consumer Protection Unit of the attorney general’s Office is given the authority to bring actions to enforce this Act.

Georgia
H.B. 213
Signed by governor 5/29/03, Act 78
Relates to business administration, so as to change certain definitions; provides for restrictions on information which may be printed on receipts for certain payment card transactions; clarifies the administrator’s duties and powers and procedure related to enforcement of this chapter; provides for civil and criminal penalties; provides for related matters.

Idaho
H.B. 134
Signed by governor 3/27/03, Session Law Chapter 134
Amends and adds to existing law to provide restrictions on the information printed on receipts for payment card transactions by prohibiting the printing of more than the last five digits of the account number; and to provide penalties.

Illinois
H.B. 259
Signed by governor 7/22/03, Public Act 93-231
Creates the Credit Card and Debit Card Account Disclosure Act.  Provides that a person or entity that provides anything of value upon presentation of a credit card or debit card may not print or otherwise reproduce on the cardholder's receipt either of the following: any part of the credit card or debit card account number, other than the last five digits or characters, or the expiration date of the credit card or debit card.  Provides that the prohibition does not apply where the person to whom the credit card or debit card is presented cannot record credit card or debit card numbers except in writing or by imprint.  Provides that the prohibition does not apply to electronic benefits transfers under the federal Food Stamp Program.  Provides that a person who violates the prohibition is liable to the issuer or the cardholder for any actual damages resulting from the use of the cardholder's credit card or debit card without his or her permission and for costs and attorney's fees.  Provides that the Act becomes operative on January 1, 2005 with respect to any credit card or debit card transaction receipt device that is in use prior to January 1, 2004, and becomes operative on January 1, 2004 with respect to any such device first put to use on or after January 1, 2004.

S.B. 244
Amends the Consumer Fraud and Deceptive Business Practices Act.  Provides that a person who accepts credit cards for the transaction of business may not print more than the last five digits of the credit card account number or the expiration date upon any receipt provided to the cardholder.  Provides that a violation is an unlawful practice within the meaning of the Act.  Applies only to receipts that are electronically printed and does not apply to transactions in which the sole means of recording the person's credit card number is by handwriting or by an imprint or copy of the credit card.  Provides that the new provisions become operative on January 1, 2008, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is in use before January 1, 2005.  Provides that the new provisions become operative on January 1, 2005, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is first put into use on or after January 1, 2005.

Kentucky
H.B. 70
Requires that electronic cash registers and similar machines print not more than the last five digits of the credit or debit card number and not print the card expiration date on credit and debit card receipts; provides that the Act does not apply to hand written receipts or to nonelectronic imprints of credit and debit cards; creates new sections of KRS 434.550 to 434.730 to define merchant, payment card, reencoder, and scanning device; creates a Class D felony for using a scanning device or reencoder to gather information encoded on magnetic strip of payment card or place information on the magnetic strip of a different card with intent to defraud authorized user or issuer of card; makes subsequent offenses a Class C felony; provides for suppliers of credit or debit card hardware or software to comply with the bill; effective January 1, 2004 for newly installed machines and January 1, 2006 for current machines.

Massachusetts
H.B. 1047
H.B. 3292
H.B. 4203
Relates to the printing of credit card numbers in business transactions.

Michigan
H.B. 4250
Amends the Michigan Penal Code to make it a misdemeanor for a person engaged in the conduct of trade or commerce to issue or deliver a receipt to a consumer that displays any part of the expiration date of a credit or debit card or more than the last four digits of the card’s account number.  A violation would be punishable by a fine of not more than $1,000.

H.B. 4323
Creates a new act, the Consumer Credit Privacy Act. Prohibits businesses from using certain practices in credit transactions, including transactions made by credit and debit cards and those involving discount cards. A credit card or debit card transaction made on or after June 1, 2004 (or January 1, 2007 for cash registers or similar devices in use on June 1, 2004) could not print or electronically issue a transaction receipt that contained any part of the expiration date or more than the last five digits of the consumer's account number. (This would not apply if the only receipt issued were a receipt on which the account number or expiration date were handwritten, mechanically imprinted, or photocopied.)

Minnesota
H.F. 467
S.F. 506
Passed Senate 4/15/03
Prohibits the printing of the full credit or debit card numbers on sales receipts.

H.F. 980
S.F. 969
Prohibits use of electronic scanning devices to capture encoded information from a credit or other financial transaction card, and placing it on another card, with intent to defraud; prohibits merchants who accept credit cards from printing more than the last five digits of the card; prescribes penalties.

Missouri
S.B. 292
Signed by governor 5/30/03
Provides that no person, other than the cardholder shall disclose more than the last five digits of a credit card or debit card account number on a sales receipt provided to the cardholder for merchandise sold in this state.

Nevada
S.B. 297
Signed by governor 5/28/03, Chapter 257
Relates to personal identifying information; makes various changes relating to personal identifying information; prohibits a person from unlawfully possessing or using a scanning device or reencoder to acquire certain personal identifying information; clarifies the applicability of certain crimes relating to personal identifying information; prohibits a public officer or public employee from committing certain unlawful acts relating to personal identifying information; restricts the type of credit card or debit card information that may be printed electronically on a receipt; provides penalties.

New Mexico
S.B. 253
Signed by governor 4/5/03, Chapter 169
Relates to commercial instruments and transactions; restricts the credit card account number information that can be disclosed; enacts the Privacy Protection Act.

New York
A.B. 5150
Signed by governor 9/9/03, Chapter 499
S.B. 4531
Substituted by A.B. 5150 6/11/03
Prohibits businesses from printing charge, credit, or debit card numbers or receipts that are electronically created; imposes penalties for violations.

North Carolina
H.B. 357
Signed by governor 6/18/03, Chapter 206
Prohibits a person that accepts credit, charge, or debit cards for the transaction of business from printing more than five digits of a credit, charge, or debit card account number or an expiration date on a sales receipt and prohibits a person from selling a cash register or other machine or device that electronically prints receipts of credit, charge, or debit card transactions that cannot be programmed or operated to produce a receipt with five or fewer digits of the credit, charge, or debit card account number and no expiration date printed on the receipt.

S.B. 947
Prohibits, when credit or debit cards are accepted for the transaction of business, the printing of more than five digits of the credit card account number on any receipt provided at the point of sale.

Oregon
H.B. 2103
Signed by governor 6/11/03, Chapter 290
Prohibits a person from selling, leasing or renting payment processing system that provides a customer receipt with more information about customer than the customer's name and last five digits of customer's credit or debit card number.  Prohibits a person from creating customer receipts with more information about a customer than the customer’s name and last five digits of customer's credit or debit card number.  Requires a person that creates or retains a copy of a receipt that contains more information than customer name and last five numbers of credit or debit card to destroy receipt within certain time.  Authorizes the attorney general or district attorney to bring action to prevent violations.  Imposes civil penalty for violation of order or injunction.  Increases civil penalty for unlawful credit or debit card solicitations.  Authorizes courts to award attorney fees to the prevailing party in action to impose civil penalty.

H.B. 2318
Signed by governor 9/24/03, Chapter 803
Makes technical corrections to statutes relating to records.  Exempts Social Security numbers of public employees and volunteers from disclosure under public records law.  Provides exceptions.  Allows the sale, lease or rental of payment processing systems that shows no more than five digits of customer’s credit or debit card number.  Allows the creation of credit or debit card receipts that show no more than five digits of customer’s credit or debit card number.  Limits the prohibition on the lease or rental of systems that shows more information about a customer than customer’s name and five digits of customer’s credit or debit card number to system obtained through lease or rental agreement entered into on or after effective date of Act.

S.B. 940
Allows sale, lease or rental of a payment processing system that shows no more than five digits of customer's credit or debit card number.  Allows creation of credit or debit card receipt that shows no more than five digits of customer's credit or debit card number.  Limits prohibition on lease or rental of system that shows more information about customer than customer’s name and five digits of customer’s credit or debit card number to system obtained through lease or rental agreement entered into on or after effective date of Act.

Pennsylvania
H.B. 1223
Amends the Credit Card Information Act, prohibiting certain credit card information on receipts.

Rhode Island
H.B. 5283
Establishes liability with respect to the electronic printing of credit card account numbers on sales receipts.

Texas
S.B. 235
Signed by governor 6/20/03
Relates to the contents of a receipt or other document issued for payment by credit card.

2002 Legislation

Colorado
H.B. 1144
Signed by governor 4/25/02, Chapter 128
Prohibits any person that accepts credit cards for the transaction of business from printing more than the last five numbers or expiration date of a credit card on the receipt to the cardholder.  Provides an exception for such restriction for persons who must handwrite, imprint, or copy a credit card for business purposes.  Defines credit card as a card or device existing for the purpose of obtaining money, property, labor, or services on credit; those cards pursuant to which unpaid balances are payable upon demand; and any card or device used to withdraw moneys from a bank account.

Delaware
S.B. 296
Requires electronically printed credit and debit card receipts to contain no more than the last five digits of the account number or expiration date.  Credit and debit card takers in business before January 1, 2003 have until January 1, 2004 to comply.  Applies immediately to all those who begin to accept credit or debit cards on or after January 1, 2003.  The penalty is an unclassified misdemeanor (up to 30 days and up to a $575 fine), and the Consumer Protection Unit of the Attorney General's Office is given the authority to bring actions to enforce this Act.

Florida
H.B. 1143
Died in committee 3/22/02
Limits credit card number information on electronically printed receipts.

H.B. 1295
Laid on table 03/14/02
Provides restrictions on information that may be printed on receipts for certain payment card transactions and provides for enforcement.

S.B. 1020
Signed by governor 4/24/02, Chapter 170
Provides restrictions on information that may be printed on receipts for certain payment-card transactions, provides penalties and provides for enforcement.

S.B. 1398
Prohibits the appearance of certain information on receipts for purchases made by credit card.

S.B. 1894
Withdrawn from further consideration 2/14/02
Limits credit card number information on electronically printed receipts.

Illinois
S.B. 1546
Provides that a person who accepts credit cards for the transaction of business may not print more than the last five digits of the credit card account number or the expiration date upon any receipt provided to the cardholder.  Provides that a violation is an unlawful practice within the meaning of the Act.  Applies only to receipts that are electronically printed and does not apply to transactions in which the sole means of recording the person's credit card number is by handwriting or by an imprint or copy of the credit card.  Provides that the new provisions become operative on January 1, 2007, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is in use before January 1, 2004.  Provides that the new provisions become operative on January 1, 2004, with respect to any cash register or other machine or device that electronically prints receipts for credit card transactions that is first put into use on or after January 1, 2004.

Kansas
H.B. 2676
Signed by governor 5/16/02, Chapter 110
Provides restrictions on electronically printed credit card and debit card receipts.

Kentucky
H.B. 65
Creates a new section of KRS 434.550 to .730 relating to credit and debit cards to require that electronic cash registers and similar machines print not more than the last five digits of the credit or debit card number and not print the card expiration date on credit and debit card receipts.  Does not apply to hand written receipts or to non electronic imprints of credit and debit cards.  Effective January 1, 2003 for newly installed machines and January 1, 2005 for current machines.  Creates a new section of KRS 434.550 to 434.730 to define merchant, payment card, reencoder, and scanning device; creates a Class D felony for using a scanning device or reencoder to gather information encoded on magnetic strip of a payment card or place information on the magnetic strip of a different card with intent to defraud authorized user or issuer of card; makes subsequent offenses a Class C felony.

Maine
L.D. 1880

Signed by governor 3/12/02, Chapter 527
Prohibits a person from issuing to a cardholder a credit card receipt that contains more than the last five digits of the credit card or contains the expiration date.  Does not apply if the only means of recording the card number is by handwriting or imprint.

Maryland
S.B. 25
Signed by governor 5/6/02, Chapter 295
Prohibits a person that accepts a credit card number or other payment device number for the transaction of business from printing more than eight digits of said number on a receipt provided to the holder of the credit card or payment device; provides for a civil penalty not exceeding $25 for each violation; and provides for the application of the Act.

Missouri
H.B. 1762
Makes it an unlawful practice to disclose more than the last five credit card or debit card numbers on any sales receipt.  A first violation is an infraction and a subsequent violation is a class A misdemeanor.  Allows a prosecution for the fraudulent use of credit cards or stealing involving the fraudulent use of a credit card, check, or checking account to take place in the current venues, as well as in the county where the defendant resides, the county where the victim resides, and the county in which the property obtained was located.

S.B. 895
Signed by governor 7/11/02
Prohibits printing more than the last five digits of a credit card or debit card account number on any sales receipt for merchandise sold in this state and prohibits the use of a scanner or reencoder with the intent to defraud.

Nebraska
L.B. 276
Signed by governor 4/16/02
Amends the crime of and penalties for criminal impersonation and financial transaction devices; provides for restitution; prohibits the printing of payment card numbers and the use of scanning devices or reencoders as prescribed.

L.B. 870
Requires a person who accepts a payment card for the transaction of business to print no more than the last five digits of the payment card account number and/or the expiration date upon any receipt provided to the payment card holder.  Applies only to receipts that are electronically printed and does not apply to any transaction in which the only means of recording the payment card number is by handwriting or by an imprint or copy of the payment card.

New Jersey
A.B. 104
Substituted by S.B. 1149 10/7/02
S.B. 1149
Signed by governor 11/18/02, Chapter 101
Prohibits a retail sales establishment from printing electronically more than the last five digits of a customer's credit card account number or the expiration date of that credit card upon any sales receipt provided at the point of sale to the customer.  The bill does not apply to any sales receipt in which the sole means of recording the customer's credit card number is by handwriting or by an imprint or copy of the credit card.

New York
A.B. 5973
Signed by governor 8/20/02, Chapter 479
S.B. 4697
Provides enhanced security to debit and credit card transactions by prohibiting the printing of the debit or credit card number on transaction forms and other restrictions; affords the same protections to debit cards as exist for credit card transactions.

A.B. 8453
Prohibits businesses from printing charge, credit, or debit card numbers on receipts that are electronically created.

Ohio
S.B. 250
Signed by governor 1/2/03, Session Law 224
Enacts §1349.18 of the Revised Code to prohibit the recording of more than the last five digits of a credit card account number, or recording the expiration date of a credit card, on an electronically printed receipt provided to a credit cardholder, and provides civil remedies for a violation of the act and for enforcement by the attorney general.

Oklahoma
S.B. 931
Signed by governor 5/22/02
Prohibits the printing of specified information on credit and debit card receipts.

Pennsylvania
H.B. 2821
Prohibits certain credit card information on receipts.

Rhode Island
S.B. 2031
Establishes liability with respect to the electronic printing of credit card account numbers on sales receipts.

Virginia
S.B. 140
Signed by governor 4/7/02, Chapter 744
Prohibits certain persons from printing certain numbers or the expiration date of a credit card, debit card or other payment devices on receipts.  Applies to all new electronic devices in service by July 1, 2003.  For all other devices in service prior to July 1, 2003, the provisions apply on July 1, 2007.  Violators of this section shall be liable for damages caused to the cardholder or other payment device holder due to the use of the card or other payment device with the cardholder's or other payment device holder's permission.

Wisconsin
A.B. 712
Prohibits a person who sells goods at retail or who sells services from including certain information on a sales receipt if the receipt is for a purchase made with the use of a credit or debit card.  Specifies that the seller may not include more than five digits of the credit or debit card number on the receipt.  Does not apply to a person who issues a handwritten receipt or a receipt that is manually prepared by making an imprint of a credit or debit card.  The prohibition under the bill does not take effect until the first day of the 37th month beginning after the bill becomes law.

S.B. 365
Prohibits a person who sells goods at retail or who sells services from including certain information on a sales receipt if the receipt is for a purchase made with the use of a credit or debit card.  Specifies that the seller may not include more than five digits of the credit or debit card number on the receipt.  Does not apply to a person who issues a handwritten receipt or a receipt that is manually prepared by making an imprint of a credit or debit card.

2001 Legislation

Arizona
H.B. 2134
Signed by governor 4/21/01, Chapter 188
Prohibits printing more than the last five credit card account number digits on electronically-printed receipts.

Louisiana
H.B. 512
Restricts the amount of information that may appear on an electronically printed credit card or debit card receipt.

H.B. 626
Signed by governor 6/22/01, Act 584
Restricts the amount of information that may appear on an electronically printed credit card receipt.

Pennsylvania
S.B. 348
Amends the Credit Card Information Act, prohibiting certain credit card information on receipts.

West Virginia
S.B. 617
Requires retail merchants to destroy receipts of consumer credit card transactions.

Wisconsin
A.B. 459
Prohibits the disclosure of information on credit and debit card receipts for the purchase of motor fuel.

2000 Legislation

Washington
H.B. 2410
Signed by governor 3/27/00, Chapter 163
Prohibits a person who accepts credit cards for the transaction of business from electronically printing more than the last five digits of the credit card account number or print the credit card expiration date on a credit card receipt to the cardholder.

1999 Legislation

California
S.B. 930
Chaptered by secretary of state 9/16/99, Chapter 423
Prohibits, after certain dates, a person who accepts credit cards for the transaction of business from printing more than the last five digits of the credit card account number or the expiration date upon any receipt provided to the cardholder, subject to an exception.