Michigan Compiled Laws, Chapter 500. Insurance Code of 1956 § 500.533

Sec. 533. (1) A licensee shall not, directly or through an affiliate, disclose, other than to a consumer reporting agency, a policy or account number or other access number or access code for a consumer's policy, credit card account, deposit account, or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing, or other marketing through electronic mail to the consumer.

(2) Subsection (1) does not apply if a licensee discloses a policy or account number or other access number or access code as follows:

(3) Subsection (1) does not apply if the policy or account number, or other access number or access code, is in an encrypted form, as long as the licensee does not provide the recipient with a means to decode the number or code.

(4) As used in this section, “transaction account” means an account other than a deposit account or a credit card account. A transaction account does not include an account to which third parties cannot initiate charges.