; or (B) with respect to covered information relating to individuals that is transferred to such class, compliance by such class with such provision would not sufficiently benefit such individuals. 133. Data integrity (a) In general Each covered entity shall attempt to establish and maintain reasonable procedures to ensure that personally identifiable information that is covered information and maintained by the covered entity is accurate in those instances where the covered information could be used to deny consumers benefits or cause significant harm. (b) Exception Subsection (a) shall not apply to covered information of an individual maintained by a covered entity that is provided— (1) directly to the covered entity by the individual; (2) to the covered entity by another entity at the request of the individual; (3) to prevent or detect fraud; or (4) to provide for a secure environment. D Right to notice of breaches of security 141. Definitions In this subtitle: (1) Breach of security (A) In general The term breach of security means compromise of the security, confidentiality, or integrity of, or loss of, data in electronic form that results in, or there is a reasonable basis to conclude has resulted in, unauthorized access to or acquisition of personally identifiable information from a covered entity. (B) Exclusions The term breach of security does not include— (i) a good faith acquisition of personally identifiable information by a covered entity, or an employee or agent of a covered entity, if the personally identifiable information is not subject to further use or unauthorized disclosure; (ii) any lawfully authorized investigative, protective, or intelligence activity of a law enforcement or an intelligence agency of the United States, a State, or a political subdivision of a State