15 U.S. Code § 8402 - Prohibitions against certain unfair and deceptive Internet sales practices
(a) Requirements for certain Internet-based sales
It shall be unlawful for any post-transaction third party seller to charge or attempt to charge any consumer’s credit card, debit card, bank account, or other financial account for any good or service sold in a transaction effected on the Internet, unless—
(1) before obtaining the consumer’s billing information, the post-transaction third party seller has clearly and conspicuously disclosed to the consumer all material terms of the transaction, including—
(B) the fact that the post-transaction third party seller is not affiliated with the initial merchant, which may include disclosure of the name of the post-transaction third party in a manner that clearly differentiates the post-transaction third party seller from the initial merchant; and
(2) the post-transaction third party seller has received the express informed consent for the charge from the consumer whose credit card, debit card, bank account, or other financial account will be charged by—
(A) obtaining from the consumer—
(b) Prohibition on data-pass used to facilitate certain deceptive Internet sales transactions
It shall be unlawful for an initial merchant to disclose a credit card, debit card, bank account, or other financial account number, or to disclose other billing information that is used to charge a customer of the initial merchant, to any post-transaction third party seller for use in an Internet-based sale of any goods or services from that post-transaction third party seller.
(c) Application with other law
In this section:
(1) Initial merchant
The term “initial merchant” means a person that has obtained a consumer’s billing information directly from the consumer through an Internet transaction initiated by the consumer.
(2) Post-transaction third party seller
The term “post-transaction third party seller” means a person that—
(B) solicits the purchase of such goods or services on the Internet through an initial merchant after the consumer has initiated a transaction with the initial merchant; and
 So in original. Probably should be “Fund”.
Source(Pub. L. 111–345, § 3,Dec. 29, 2010, 124 Stat. 3619.)
References in Text
The Electronic Fund Transfer Act, referred to in subsec. (c), is title IX of Pub. L. 90–321, as added by Pub. L. 95–630, title XX, § 2001,Nov. 10, 1978, 92 Stat. 3728, which is classified generally to subchapter VI (§ 1693 et seq.) of chapter 41 of this title. For complete classification of this Act to the Code, see Short Title note set out under section 1601 of this title and Tables.