; and (B) provides notice to each affected individual after a breach of security that resulted in attempted fraud or an attempted unauthorized transaction. (2) Limitations An exemption under paragraph (1) shall not apply if— (A) the breach of security includes personal information, other than a credit card number or credit card security code, of any type; or (B) the breach of security includes both the individual’s credit card number and the individual’s first and last name. (j) Financial institutions regulated by Federal functional regulators (1) In general A covered financial institution shall be deemed in compliance with this section if— (A) the Federal functional regulator with jurisdiction over the covered financial institution has issued a standard by regulation or guideline under title V of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 et seq.) that— (i) requires financial institutions within its jurisdiction to provide notification to individuals following a breach of security; and (ii) provides protections substantially similar to, or greater than, those required under this Act; and (B) the covered financial institution is in compliance with the standard under subparagraph (A). (2) Definitions In this subsection— (A) the term covered financial institution means a financial institution that is subject to— (i) the data security requirements of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 et seq.); (ii) any implementing standard issued by regulation or guideline issued under that Act; and (iii) the jurisdiction of a Federal functional regulator under that Act; (B) the term Federal functional regulator has the meaning given the term in section 509 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6809 ); and (C) the term financial institution has the meaning given the term in section 509 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6809 ). (k) Exemption