The provisions of NRS 205.461 to 205.4657, inclusive, do not apply to any person who, without the intent to defraud or commit an unlawful act, possesses or uses any personal identifying information of another person:
1. In the ordinary course of his or her business or employment; or
2. Pursuant to a financial transaction entered into with an authorized user of a payment card.