1. Disclosure prohibited. Except as provided in subsection 2, it is unlawful for a person, business, corporation, partnership, agency, financial institution, credit card registration service or other entity to rent, sell, exchange or otherwise disclose or make available to another person or entity a list containing the names, addresses and account numbers of credit card holders without the express, written permission of the credit card holders.
2. Exceptions. The following disclosures of lists containing the names, addresses and account numbers of credit card holders are not prohibited:
A. Disclosure to or from a consumer reporting agency, as defined in Title 10, section 1308, subsection 3, as long as the transfer is for purposes of compliance with and in a manner consistent with the terms of the Fair Credit Reporting Act;
B. Disclosure between a parent corporation and a subsidiary or affiliate of that corporation or between subsidiaries or affiliates of a parent corporation;
C. Disclosure in connection with the sale or pledge, or negotiation of the sale or pledge, of any portion of a business or the assets of a business, as long as the party to whom disclosure is made maintains the confidentiality of the information disclosed;
D. Disclosure in connection with authorization, processing, billing, collection, charge-back, fraud prevention or credit card recovery; and
E. Disclosure pursuant to state or federal law or at the direction of a governmental entity pursuant to law or in response to a court order.
3. Violation. A violation of this section constitutes a violation of the Maine Consumer Credit Code and the Maine Unfair Trade Practices Act.