A person who accepts a credit card from a cardholder shall not issue a receipt that lists more than five numbers from the cardholder’s credit card account number.