David Oppenheim (argued), Rolling Meadows, IL; David S.Breskin, Breskin Johnson & Townsend PLLC, Seattle, Wash-ington, for the plaintiff-appellant.Britton F. Davis, Wilson Sonsini Goodrich & Rosati, Seattle,Washington; Rodney G. Strickland, Jr. (argued) and LauraGrant, Wilson Sonsini Goodrich & Rosati, Palo Alto, Califor-nia, for the defendant-appellee.
McKEOWN, Circuit Judge:In 2003, Congress passed the Fair and Accurate CreditTransactions Act (“FACTA”), Pub. L. No. 108-159, 117 Stat.1952, an amendment to the Fair Credit Reporting Act, 15U.S.C. § 1681
, in part to combat identity theft. FACTAprovides thatno person that accepts credit cards or debit cards forthe transaction of business shall print more than thelast 5 digits of the card number or the expiration dateupon any receipt provided to the cardholder at thepoint of the sale or transaction.15 U.S.C. § 1681c(g)(1). This restriction covers only “receiptsthat are electronically printed, and [does] not apply to transac-tions in which the sole means of recording a credit card ordebit card account number is by handwriting or by an imprintor copy of the card.”
§ 1681c(g)(2).Expedia, Inc. runs a website that allows users to maketravel arrangements online. Like other merchants “thataccept[ ] credit cards or debit cards,”