No credit card registration service shall rent, sell, exchange or otherwise make available the names, addresses and account numbers of cardholders or owners of access devices entrusted to it by a credit card or access device issuer or other financial institution to any other person for use in direct mail marketing or solicitation without prior written approval of the cardholder or access device owner. Notwithstanding the foregoing, nothing in this section shall be construed to restrict a card issuer's use of its own cardholder list.
New York Legal Code