I have mentioned Option B in the past. Some shot it down but I believe you could have the customer making the referral sign the card before it is given out. The person(s) being referred sign it before it is given to the bank. Those signatures acknowledge something to the effect of "By delivering this card to the XYZ Bank and opening a new, qualifying account, I authorize Bank to pay ____ $x for my account. I understand this makes ____ aware of my new account. Bank is authorized to pay the referral fee and make ____ aware of my new account on a one-time basis."
Certainly you can find better wording with fewer blanks. Counsel certainly could and probably should refer to the specific privacy cite. But I think it is doable. Still, counsel should do it.
_________________________
AndyZ CRCM
My opinions are not necessarily my employers.
R+R-R=R+R
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell