--- title: "12 CFR 1016.12 GLBA: Limits on sharing account number information for marketing purposes" canonical: "https://dposchool.com/glba/section/1016.12" source: "https://www.ecfr.gov/current/title-12/section-1016.12" source_note: "Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-29" language: "en" publisher: "DPO School" --- 12 CFR 1016.12 GLBA · Part 1016: PRIVACY OF CONSUMER FINANCIAL INFORMATION (REGULATION P) · Subpart B: Limits on Disclosures # 12 CFR 1016.12 GLBA: Limits on sharing account number information for marketing purposes eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. ## Official text ### 12 CFR 1016.12(a) **(a)** General prohibition on disclosure of account numbers. You must not, directly or through an affiliate, disclose, other than to a consumer reporting agency, an account number or similar form of access number or access code for a consumer's credit card account, deposit account, share account, or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing, or other marketing through electronic mail to the consumer. ### 12 CFR 1016.12(b) **(b)** Exceptions. Paragraph (a) of this section does not apply if you disclose an account number or similar form of access number or access code: #### 12 CFR 1016.12(b)(1) **(1)** To your agent or service provider solely in order to perform marketing for your own products or services, as long as the agent or service provider is not authorized to directly initiate charges to the account; or #### 12 CFR 1016.12(b)(2) **(2)** To a participant in a private label credit card program or an affinity or similar program where the participants in the program are identified to the customer when the customer enters into the program. ### 12 CFR 1016.12(c) **(c)** Examples—(1) Account number. An account number, or similar form of access number or access code, does not include a number or code in an encrypted form, as long as you do not provide the recipient with a means to decode the number or code. #### 12 CFR 1016.12(c)(2) **(2)** Transaction account. A transaction account is an account other than a deposit account, a share account, or a credit card account. A transaction account does not include an account to which third parties cannot initiate charges. ## Source Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. [12 CFR 1016.12 on eCFR](https://www.ecfr.gov/current/title-12/section-1016.12) eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [GLBA Navigator](https://dposchool.com/glba) / 12 CFR 1016.12 Previous: [12 CFR 1016.11 GLBA: Limits on redisclosure and reuse of information](https://dposchool.com/glba/section/1016.11) Next: [12 CFR 1016.13 GLBA: Exception to opt out requirements for service providers and joint marketing](https://dposchool.com/glba/section/1016.13) ## For AI agents - Machine-readable index: https://dposchool.com/glba/llms.txt - JSON API: https://dposchool.com/glba/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents