; (7) the term personally identifiable information means any information that is linked, or reasonably may be linked, to a specific individual or device; and (8) the term sensitive customer proprietary information includes— (A) financial information; (B) health information; (C) information pertaining to children; (D) Social Security numbers; (E) precise geolocation information; (F) content of communications; (G) call detail information; (H) web browsing history, application usage history, and the functional equivalents of either; and (I) any other personally identifiable information that the Commission determines to be sensitive. (b) Privacy of customers of edge providers (1) Act prohibited It is unlawful for an edge provider to violate the privacy of a customer in a manner that violates a regulation prescribed under paragraph (2). (2) Regulations (A) In general In carrying out this Act, the Commission shall— (i) not later than 1 year after the date of enactment of this Act, promulgate, under section 553 of title 5, United States Code, regulations to protect the privacy of customers of edge providers; and (ii) ensure that the regulations promulgated under clause (i) take effect not later than 180 days after the date on which the regulations are promulgated. (B) Requirements under regulations In promulgating regulations under subparagraph (A), the Commission shall— (i) require an edge provider to notify a customer about the collection, use, and sharing of the sensitive customer proprietary information of the customer, including by— (I) notifying the customer about the types of sensitive customer proprietary information the edge provider collects; (II) specifying how and for what purposes the edge provider uses and shares sensitive customer proprietary information; and (III) identifying the types of entities with which the edge provider shares sensitive customer proprietary information