to or acquisition of personal information from a covered entity. (B) Exclusions The term breach of security does not include— (i) a good faith acquisition of personal information by a covered entity, or an employee or agent of a covered entity, if the personal information is not subject to further use or unauthorized disclosure