; and (2) business entities to the extent that they act as vendors of personal health records (as such term is defined in section 13400 of such Act ( 42 U.S.C. 17921 )) and third-party service providers subject to section 13407 of such Act ( 42 U.S.C. 17937 ). 13. Definitions In this Act: (1) Breach notification entity The term breach notification entity means the Federal Government entity designated pursuant to section 2(e). (2) Business entity The term business entity means any organization, corporation, trust, partnership, sole proprietorship, unincorporated association, or venture, whether or not established to make a profit. (3) Commission The term Commission means the Federal Trade Commission. (4) Consumer financial product or service The term consumer financial product or service has the meaning given that term in section 1002 of the Dodd-Frank Wall Street Reform and Consumer Protection Act ( 12 U.S.C. 5481 ). (5) Data system communication information The term data system communication information means dialing, routing, addressing, or signaling information that identifies the origin, direction, destination, processing, transmission, or termination of each communication initiated, attempted, or received. (6) Date and time The term date and time includes the date, time, and specification of the time zone offset from Coordinated Universal Time. (7) Federal agency The term Federal agency has the meaning given the term agency in section 3502 of title 44, United States Code. (8) Intelligence community The term intelligence community has the meaning given that term in section 3(4) of the National Security Act of 1947 ( 50 U.S.C. 3003(4) ). (9) Internet address The term Internet address means an Internet Protocol address as specified by the Internet Protocol version 4 or 6 protocol, or any successor protocol or any unique number for a specific host on the Internet. (10) Security breach (A) In general The term security breach means a compromise of the security, confidentiality, or integrity of, or the loss of,