Indian tribe. 6. Effect on other laws (a) Effect on State data security and breach notification laws This Act supersedes any provision of a statute or regulation of a State or political subdivision of a State, with respect to a covered entity, that expressly— (1) requires information security practices for the treatment and protection of personal information similar to any of those required under section 2