1. (a) A person who accepts a credit card or debit card for the transaction of business may not print on a receipt or other document that evidences the transaction and is provided to a cardholder more than the last four digits of the credit card or debit card account number or the month and year that the credit card or debit card expires.
2. (b) This section does not apply to a transaction in which the sole means of recording a person's credit card or debit card account number on a receipt or other document evidencing the transaction is by handwriting or an imprint or copy of the credit card or debit card.
3. (c) A person who provides, leases, or sells a cash register or other machine used to print a receipt or other document evidencing a credit card or debit card transaction shall provide notice of the requirements of this section to the recipient, lessee, or buyer, as applicable, of the machine.
4. (d) A person who violates Subsection (a) is liable to this state for a civil penalty in an amount not to exceed $500 for each calendar month in which a violation occurs. The civil penalty may not be imposed for more than one violation that occurs in a month. The attorney general or the prosecuting attorney in the county in which the violation occurs may bring an action to recover the civil penalty imposed under this section.
5. (e) The attorney general may bring an action in the name of the state to restrain or enjoin a person from violating Subsection (a).
6. (f) A court may not certify an action brought under this section as a class action.

Added by Acts 2007, 80th Leg., R.S., Ch. 885 (H.B. 2278), Sec. 2.01, eff. April 1, 2009.