Legal Matters: Collecting Customer ZIP Codes? 
Beware the Legal Risks

Nevertheless, retailers should determine whether they're in compliance with numerous state laws that prohibit the collection of full addresses or telephone numbers in connection with credit card purchases. States with such restrictions include the District of Columbia, Delaware, Georgia, Kansas, Massachusetts, Maryland, New Jersey and Wisconsin. A major class-action lawsuit was recently filed in Massachusetts, and others are sure to follow.