; or (iii) the release of a public record not otherwise subject to confidentiality or nondisclosure requirements. (2) Commission The term Commission means the Federal Trade Commission. (3) Covered entity The term covered entity means a sole proprietorship, partnership, corporation, trust, estate, cooperative, association, or other commercial entity, and any charitable, educational, or nonprofit organization, that acquires, maintains, or utilizes personal information. (4) Data in electronic form The term data in electronic form means any data stored electronically or digitally on any computer system or other database, including recordable tapes and other mass storage devices. (5) Designated entity The term designated entity means the Federal Government entity designated by the Secretary of Homeland Security under section 4. (6) Encryption The term encryption means the protection of data in electronic form in storage or in transit using an encryption technology that has been adopted by an established standards setting body which renders such data indecipherable in the absence of associated cryptographic keys necessary to enable decryption of such data. Such encryption must include appropriate management and safeguards of such keys to protect the integrity of the encryption. (7) Identity theft The term identity theft means the unauthorized use of another person's personal information for the purpose of engaging in commercial transactions under the identity of such other person, including any contact that violates section 1028A of title 18, United States Code. (8) Major credit reporting agency The term major credit reporting agency means a consumer reporting agency that compiles and maintains files on consumers on a nationwide basis within the meaning of section 603(p) of the Fair Credit Reporting Act ( 15 U.S.C. 1681a(p) ). (9) Personal information (A) Definition The term personal information means any information or compilation of information that includes— (i) a non-truncated social security number