; (C) discuss the need to protect the privacy and respect the integrity of each individual customer of the covered financial institution; and (D) be appropriate to the job responsibilities of the individual attending the training. (2) Timing The training under subsection (a) shall be provided— (A) as soon as reasonably practicable; and (B) with respect to an individual who begins employment with or becomes affiliated or associated with a covered financial institution after the date of enactment of this Act, not later than 1 year after the individual becomes employed by or affiliated or associated with the covered financial institution in a position described in paragraph (1), (2), or (3) of subsection (a). (3) Records A covered financial institution shall— (A) maintain a record of each individual who— (i) is employed by or affiliated or associated with the covered financial institution in a position described in paragraph (1), (2), or (3) of subsection (a); and (ii) has completed the training under subsection (a), regardless of whether the training was— (I) provided by the covered financial institution or a third party selected by the covered financial institution; (II) completed before the individual was employed by or affiliated or associated with the covered financial institution; and (III) completed before, on, or after the date of enactment of this Act; and (B) upon request, provide a record described in subparagraph (A) to a covered agency with examination authority over the covered financial institution. 4. Relationship to State law Nothing in this Act shall be construed to preempt or limit any provision of State law, except only to the extent that section 2 provides a greater level of protection against liability to an individual described in section 2(b)(1) or to a covered financial institution described in section 2(b)(2) than is provided under State law.