30 days or such lesser period of time which the law enforcement agency determines is reasonably necessary and requests in writing. Such a law enforcement agency may, by a subsequent written request, revoke such delay or extend the period of time set forth in the original request made under this clause if further delay is necessary. (ii) National security If a Federal national security agency or homeland security agency determines that the notification required under this section would threaten national or homeland security, such notification may be delayed for a period of time of up to 60 days which the national security agency or homeland security agency determines is reasonably necessary and requests in writing. A Federal national security agency or homeland security agency may revoke such delay or extend the period of time set forth in the original request made under this clause by a subsequent written request if further delay is necessary. (iii) Limitation on delay or extension Any delay or extension of notification permitted under this subparagraph may not exceed a total time period of one year. (b) Coordination of notification with consumer reporting agencies If a covered entity is required to provide notification to more than 5,000 individuals under subsection (a)(1), the covered entity shall also notify the major consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, of the timing and distribution of the notifications, except for a case in which the only information that is the subject of the breach of security is the individual’s first name or initial and last name, address, or phone number, in combination with a credit or debit card number and any required security code. Such notification shall be given to the consumer reporting agencies without unreasonable delay and, if such notification will not delay notification to the affected individuals, prior to the distribution of notifications to the affected individuals. (c) Method and content of notification (1)