Washington State

House of Representatives

Office of Program Research

BILL

ANALYSIS

Financial Institutions & Insurance Committee

HB 1127

This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent.

Brief Description: Securing credit and debit card information.

Sponsors: Representatives Hurst and Hinkle.

Brief Summary of Bill

  • Requires the truncation of credit card and debit card numbers on electronically printed receipts that are provided to cardholders or retained by a business or retailer.

Hearing Date: 1/22/09

Staff: Jon Hedegard (786-7127)

Background:

State law provides that persons that accept credit cards for the transaction of business may only print the last five digits of the credit card number on any receipt given to the cardholder. The expiration date may not be printed. These restrictions only apply to receipts that are electronically printed and do not apply when the means of recording the number is by imprint or handwriting. There is an additional parallel requirement specific to retailers in state law.

In 2003 the federal Fair Credit Reporting Act (Act) (15 U.S.C. 1681, et seq) was modified to provide protections parallel to those in state law for the truncation of numbers on receipts provided to cardholders. The Act preempts state laws that conflict with the specific provisions regarding truncation of credit card or debit card numbers. The Act is silent on restrictions retained by persons that accept credit cards or debit cards for the transaction of business.

Summary of Bill:

"Credit card" is defined as a card or device existing for the purpose of obtaining money, property, labor, or services on credit.

"Debit card" is defined as "a card or device used to obtain money, property, labor, or services by a transaction that debits a cardholder's account, rather than extending credit."

A person that accepts credit cards or debit cards for the transaction of business may not print more than the last five numbers of an account number or print the expiration date on an electronic receipt that is retained by the person or is provided to the cardholder. This restriction does not apply if the means of recording the number is by imprint or handwriting.

A retailer that accepts credit cards or debit cards for the transaction of business may not print more than the last five numbers of an account number or print the expiration date on an electronic receipt that is retained by the person or is provided to the cardholder. This restriction does not apply if the means of recording the number is by imprint or handwriting or if the retailer processes the transaction electronically but takes additional manual measures to ensure that the card is not used fraudulently.

Appropriation: None.

Fiscal Note: Available.

Effective Date: The bill takes effect 90 days after adjournment of the session in which the bill is passed.