PUBLIC LAW 108–159—DEC. 4, 2003
117 STAT. 1959
‘‘(i) notification that the consumer does not authorize the establishment of any new credit plan or extension of credit described in clause (i), other than under an open-end credit plan (as defined in section 103(i)), in the name of the consumer, or issuance of an additional card on an existing credit account requested by a consumer, or any increase in credit limit on an existing credit account requested by a consumer, except in accordance with subparagraph (B); and ‘‘(ii) a telephone number or other reasonable contact method designated by the consumer. ‘‘(B) LIMITATION ON USERS.—No prospective user of a consumer report or of a credit score generated using the information in the file of a consumer that includes an extended fraud alert in accordance with this section may establish a new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 103(i)), in the name of the consumer, or issue an additional card on an existing credit account requested by a consumer, or any increase in credit limit on an existing credit account requested by a consumer, unless the user contacts the consumer in person or using the contact method described in subparagraph (A)(ii) to confirm that the application for a new credit plan or increase in credit limit, or request for an additional card is not the result of identity theft.’’. (b) RULEMAKING.—The Commission shall prescribe regulations to define what constitutes appropriate proof of identity for purposes of sections 605A, 605B, and 609(a)(1) of the Fair Credit Reporting Act, as amended by this Act.
15 USC 1681c–1 note.
SEC. 113. TRUNCATION OF CREDIT CARD AND DEBIT CARD ACCOUNT NUMBERS.
Section 605 of the Fair Credit Reporting Act (15 U.S.C. 1681c) is amended by adding at the end the following: ‘‘(g) TRUNCATION OF CREDIT CARD AND DEBIT CARD NUMBERS.— ‘‘(1) IN GENERAL.—Except as otherwise provided in this subsection, no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction. ‘‘(2) LIMITATION.—This subsection shall apply only to receipts that are electronically printed, and shall not apply to transactions in which the sole means of recording a credit card or debit card account number is by handwriting or by an imprint or copy of the card. ‘‘(3) EFFECTIVE DATE.—This subsection shall become effective— ‘‘(A) 3 years after the date of enactment of this subsection, with respect to any cash register or other machine or device that electronically prints receipts for credit card or debit card transactions that is in use before January 1, 2005; and ‘‘(B) 1 year after the date of enactment of this subsection, with respect to any cash register or other machine
VerDate 11-MAY-2000
10:15 Aug 27, 2004
Jkt 019194
PO 00000
Frm 00911
Fmt 6580
Sfmt 6581
Applicability.
D:\STATUTES\2003\19194PT2.001
APPS10
PsN: 19194PT2
�
