(1) The general assembly hereby finds, determines, and declares that credit, particularly the use of credit cards, is an important tool for consumers in today's economy. Unscrupulous persons often fraudulently use the credit card accounts of others by stealing the credit card itself or obtaining the necessary information to fraudulently charge the purchase of goods and services to another person's credit card account. The general assembly, therefore, finds, determines, and declares that protection from unauthorized use of credit card accounts is necessary.

(2) No person that accepts credit cards for the transaction of business shall print more than the last five digits of the credit card account number or print the credit card expiration date, or both, on a credit card receipt.

(3) This section shall apply only to receipts that are electronically printed and shall not apply to transactions in which the sole means of recording the credit card number is by handwriting or by an imprint or copy of the credit card.

(4) For the purposes of this section, "credit card" means a card or device existing for the purpose of obtaining money, property, labor, or services on credit; those cards pursuant to which unpaid balances are payable upon demand; and any card or device used to withdraw moneys from a bank account.

(5) (a) Except as provided in paragraph (c) of this subsection (5), this section shall apply to any entity formed on and after April 25, 2002, that uses a cash register or any other machine or device that electronically imprints receipts on credit card transactions and is placed into service on or after April 25, 2002.

(b) Except as provided in paragraph (c) of this subsection (5), on and after January 1, 2004, this section shall apply to any cash register and any other machine or device that electronically imprints receipts on credit card transactions for entities that were formed on or before April 25, 2002.

(c) On and after January 1, 2005, this section shall apply to:

(I) Institutions of higher education; and

(II) Persons who employ no more than twenty-five employees or who have generated no more than five million dollars annually in revenues from the person's business activities.