; and (3) intervene in a State action under section 201. (c) Pending proceedings If the Attorney General institutes a proceeding or action for a violation of a Federal law enacted after the date of the enactment of this Act relating to data security, no authority of a State may, during the pendency of such proceeding or action, bring an action under this section against any defendant named in such criminal proceeding or a civil action against any defendant for any violation that is alleged in that proceeding or action. (d) Definition As used in this section, the term State consumer protection attorney means the attorney general of a State or any State or local law enforcement agency authorized by the State attorney general or by State statute to prosecute violations of consumer protection law. 203. Requirement that agency rulemaking take into consideration impacts on individual privacy (a) In general Title 5, United States Code, is amended by adding after section 553 the following new section: 553a. Privacy impact assessment in rulemaking (a) Initial privacy impact assessment (1) In general Whenever an agency is required by section 553 of this title, or any other law, to publish a general notice of proposed rulemaking for a proposed rule, or publishes a notice of proposed rulemaking for an interpretative rule involving the internal revenue laws of the United States, and such rule or proposed rulemaking pertains to the collection, maintenance, use, or disclosure of personally identifiable information from ten or more individuals, other than agencies, instrumentalities, or employees of the Federal Government, the agency shall prepare and make available for public comment an initial privacy impact assessment that describes the impact of the proposed rule on the privacy of individuals. Such assessment or a summary thereof shall be signed by the senior agency official with primary responsibility for privacy policy and be published in the Federal Register at the time of the publication of a general notice of proposed