; and (2) on an annual basis, submit a report to Congress on the notifications received under subsection (a). 217. Notice to law enforcement (a) Designation of government entity To receive notice (1) In general Not later than 60 days after the date of enactment of this Act, the Secretary of Homeland Security, in consultation with the Attorney General, shall designate a Federal Government entity to receive the notices required under section 211 and this section. (2) Responsibilities of the designated entity The designated entity shall— (A) promptly provide the information that it receives to the United States Secret Service or the Federal Bureau of Investigation for law enforcement purposes; and (B) provide the information described in subparagraph (A) as appropriate to other Federal agencies for law enforcement, national security, or data security purposes. (b) Notice A covered entity shall notify the designated entity of the fact that a security breach has occurred if— (1) the number of individuals whose sensitive personally identifying information was, or is reasonably believed to have been, accessed or acquired by an unauthorized person exceeds 5,000; (2) the security breach involves a database, networked or integrated databases, or other data system containing the sensitive personally identifiable information of more than 500,000 individuals nationwide; (3) the security breach involves databases owned by the Federal Government