A licensee shall not, directly or through an affiliate, disclose other than to a consumer reporting agency, an account number or similar form of access number or access code for consumer's credit card account, deposit account or transaction account of a consumer to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to the consumer.
Section 3610.1 shall not apply if a licensee discloses an account number of similar form of access number or access code:
For the purposes of this section, a policy or transaction account is an account other than a deposit account or a credit card account. A policy or transaction account does not include an account to which third parties cannot initiate charges.
For purposes of section, a policy number or similar form of access number or access code, does not include a number or code in an encrypted form, as long as the licensee does not provide the recipient with a means to decode the number or the code.
D.C. Mun. Regs. tit. 26, r. 26-A3610