; (ii) any lawfully authorized investigative, protective, or intelligence activity of a law enforcement or an intelligence agency of the United States, a State, or a political subdivision of a State; or (iii) the release of a public record not otherwise subject to confidentiality or nondisclosure requirements. (2) Covered entity The term covered entity means a sole proprietorship, partnership, corporation, trust, estate, cooperative, association, or other commercial entity, and any charitable, educational, or nonprofit organization, that acquires, maintains, or utilizes personal information. (3) Data in electronic form The term data in electronic form means any data stored electronically or digitally on any computer system or other database, including recordable tapes and other mass storage devices. (4) Identity theft The term identity theft means the unauthorized use of another person's personal information for the purpose of engaging in commercial transactions under the identity of such other person, including any contact that violates section 1028A of title 18, United States Code. (5) Personal information (A) Definition The term personal information means any information or compilation of information that includes— (i) a non-truncated Social Security number; (ii) a financial account number or credit or debit card number in combination with any security code, access code, or password that is required for an individual to obtain credit, withdraw funds, or engage in a financial transaction; or (iii) an individual’s first and last name or first initial and last name in combination with— (I) a driver’s license number, a passport number, or an alien registration number, or other similar number issued on a government document used to verify identity; (II) unique biometric data such as a fingerprint, voice print, retina or iris image, or any other unique physical representation