New York General Business Law Section 521-C - Limitation on release of subscriber names.

  521-c.  Limitation  on  release of subscriber names. No credit card
  registration service  shall  rent,  sell,  exchange  or  otherwise  make
  available  the  names,  addresses  and account numbers of cardholders or
  owners of access devices entrusted to it by  a  credit  card  or  access
  device issuer or other financial institution to any other person for use
  in  direct mail marketing or solicitation without prior written approval
  of the cardholder or access device owner. Notwithstanding the foregoing,
  nothing in this section shall be construed to restrict a  card  issuer's
  use of its own cardholder list.

Last modified: February 3, 2019