Privacy Rule Handbook

Prohibition on sharing account numbers: The privacy rule prohibits a bank from disclosing an account number or access code for bank card, deposit, or transaction debts to any nonaffiliated third party for use in marketing. The rule contains two narrow exceptions to this ordinary prohibition. A bank may share account numbers at the side of advertising its own items so long as the carrier issuer is not accredited to directly provoke costs to the accounts. A bank also can divulge account numbers to a participant in a private label or affinity credit card application when the participants are diagnosed to the purchaser. An account number doesn’t include a host or code in encrypted form so long as the bank doesn’t also deliver a means to decode the number.