Regulator prohibits use of transaction data for marketing purposes

White & Case, here