A new federal “identity theft” law prohibits merchants from printing more than the last five digits of a credit or debit card number on a customer’s receipt. The law is triggering a lot of class-action lawsuits against companies that haven’t updated their receipt systems. For instance, many companies still print credit card expiration dates on receipts, which is prohibited by the law and can easily lead to a lawsuit.