The proposed rules would apply to both banks and non-banking financial companies which issue credit, debit, or prepaid cards.