California Code, Financial Code - FIN § 4054.6

(a) When a financial institution and an organization or business entity that is not a financial institution (“affinity partner”) have an agreement to issue a credit card in the name of the affinity partner (“affinity card”), the financial institution shall be permitted to disclose to the affinity partner in whose name the card is issued only the following information pertaining to the financial institution's customers who are in receipt of the affinity card: (1) name, address, telephone number, and electronic mail address and (2) record of purchases made using the affinity card in a business establishment, including a Web site, bearing the brand name of the affinity partner.

(b) When a financial institution and an affinity partner have an agreement to issue a financial product or service, other than a credit card, on behalf of the affinity partner (“affinity financial product or service”), the financial institution shall be permitted to disclose to the affinity partner only the following information pertaining to the financial institution's customers who obtained the affinity financial product or service: name, address, telephone number, and electronic mail address.

(c) The disclosures specified in subdivisions (a) and (b) shall be permitted only if the following requirements are met:

(d) Nothing in this section shall prohibit the disclosure of nonpublic personal information pursuant to Section 4056.

(e) This section does not apply to credit cards issued in the name of an entity primarily engaged in retail sales or a name proprietary to a company primarily engaged in retail sales.