Rule 160.12 Limits on sharing account number information for marketing purposes