15 U.S. Code § 8402 - Prohibitions against certain unfair and deceptive Internet sales practices
It shall be unlawful for an initial merchant to disclose a credit card, debit card, bank account, or other financial account number, or to disclose other billing information that is used to charge a customer of the initial merchant, to any post-transaction third party seller for use in an Internet-based sale of any goods or services from that post-transaction third party seller.
The term “initial merchant” means a person that has obtained a consumer’s billing information directly from the consumer through an Internet transaction initiated by the consumer.
 So in original. Probably should be “Fund”.
The Electronic Fund Transfer Act, referred to in subsec. (c), is title IX of Pub. L. 90–321, as added by Pub. L. 95–630, title XX, § 2001, Nov. 10, 1978, 92 Stat. 3728, which is classified generally to subchapter VI (§ 1693 et seq.) of chapter 41 of this title. For complete classification of this Act to the Code, see Short Title note set out under section 1601 of this title and Tables.