In this section, “payment device number” means any code, account number, or other means of account access, other than a check, draft, or similar paper instrument, that can be used to obtain money, goods, services, or anything of value, or for purposes of initiating a transfer of funds. “Payment device number” includes a credit card number and a debit card number. This section applies only to receipts that are electronically printed in connection with the purchase of consumer goods or consumer services. This section does not apply to receipts where the sole means of recording the payment device number is by handwriting, imprinting, or copying the payment device. A person that accepts a payment device number for the transaction of business may not print more than five digits of the payment device number or the expiration date of the payment device on a receipt that is provided to the holder of the payment device at the point of sale or transaction or retained by the person. The Attorney General may initiate a civil action against a person that violates this section to recover for the State a civil penalty not exceeding $25 for each violation. For the purposes of this section, each instance in which a payment device number or expiration date is printed when prohibited by this section is a separate violation.