; and (B) includes appropriate management and safeguards of such cryptographic keys so as to protect the integrity of the encryption. (9) Identity theft The term identity theft means a violation of section 1028(a)(7) of title 18, United States Code. (10) Security breach (A) In general The term security breach means compromise of the privacy, integrity, or security of computerized data that results in, or that there is a reasonable basis to conclude has resulted in, unauthorized access to or acquisition of sensitive personally identifiable information. (B) Exclusion The term security breach does not include— (i) a good faith access or acquisition of sensitive personally identifiable information by a business entity, or an employee or agent of a business entity, if the sensitive personally identifiable information is not subject to further unauthorized disclosure; (ii) the release of a public record not otherwise subject to confidentiality or nondisclosure requirements