Or. Admin. Code § 836-080-0685 - Limits on Sharing Account Number Information for Marketing Purposes

(1) General prohibition on disclosure of account numbers. A licensee shall not, directly or through an affiliate, other than to a consumer reporting agency, disclose a policy number or similar form of access number or access code for a consumer's policy or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to the consumer.

(2) Exceptions. Section (1) of this rule does not apply if a licensee discloses a policy number or similar form of access number or access code:

(a) To the licensee's service provider solely in order to perform marketing for the licensee's own products or services, as long as the service provider is not authorized to directly initiate charges to the account;

(b) To a licensee who is an insurance producer solely in order to perform marketing for the licensee's own products or services; or

(c) To a participant in an affinity or similar program when the participants in the program are identified to the customer when the customer enters into the program.

(3) The following are examples for purposes of this rule:

(a) Policy number. A policy number, or similar form of access number or access code, does not include a number or code in an encrypted form, as long as the licensee does not provide the recipient with a means to decode the number or code.

(b) Policy or transaction account. For the purpose of this rule, a policy or transaction account is an account other than a deposit account or a credit card account. A policy or transaction account does not include an account to which third parties cannot initiate charges.

(4) Violation of this section is an unfair trade practice for purposes of ORS 746.240.

Notes

Or. Admin. Code § 836-080-0685

ID 4-2005, f. & cert. ef. 4-1-05

Stat. Auth.: ORS 731.244 & 746.608

Stats. Implemented: ORS 746.600, 746.240 & 746.607