; or (B) requires notification to individuals of a breach of security of personal information as defined in section 6. (2) Covered entities under section 5(b) With respect to a covered entity subject to the Act under section 5(b), this Act supersedes any provision of a statute, regulation, or rule of a State or political subdivision of a State that expressly requires notification to individuals of a breach of security of personal information as defined in section 6. (b) Additional preemption (1) In general No person other than a person specified in section 5(d) may bring a civil action under the laws of any State if such action is premised in whole or in part upon the defendant violating any provision of this Act. (2) Protection of consumer protection laws Except as provided in subsection (a) of this section, this subsection shall not be construed to limit the enforcement of any State consumer protection law by an attorney general of a State. (c) Protection of certain State laws This Act shall not be construed to preempt the applicability of— (1) State trespass, contract, or tort law; or (2) any other State laws to the extent that those laws relate to acts of fraud. (d) Preservation of FTC authority Nothing in this Act may be construed in any way to limit or affect the Commission's authority under any other provision of law. 8. Effective date This Act and the amendments made by this Act shall take effect 1 year after the date of enactment of this Act.