; and (B) with respect to a consumer that has been specifically notified by the consumer reporting agency that the consumer was affected by the breach of data security, place or remove an unlimited amount of security freezes, upon request, without a fee. (3) Definitions In this subsection: (A) Breach of data security (i) In general The term breach of data security means the unauthorized acquisition of sensitive financial account information or sensitive personal information. (ii) Exception for data that is not in usable form The term breach of data security does not include the unauthorized acquisition of sensitive financial account information or sensitive personal information that is encrypted, redacted, or otherwise protected by another method that renders the information unreadable and unusable if the encryption, redaction, or protection process or key is not also acquired without authorization. (B) Security freeze The term security freeze means a notice placed in a consumer report, at the request of a consumer, that prohibits the credit reporting agency from releasing the consumer report or any information in the consumer report without the express authorization of the consumer. (C) Sensitive financial account information The term sensitive financial account information means a financial account number relating to a consumer, including a credit card number or debit card number, in combination with any security code, access code, password, or other personal identification information required to access the financial account. (D) Sensitive personal information (i) In general The term sensitive personal information includes— (I) a Social Security number; and (II) the first and last name of a consumer in combination with— (aa) the consumer’s driver’s license number, passport number, military identification number, or other similar number issued on a government document used to verify identity