; (II) unique biometric data such as a fingerprint, voice print, retina or iris image, or any other unique physical representation; (III) a unique account identifier, electronic identification number, user name, or routing code in combination with any associated security code, access code, or password that is required for an individual to obtain money, goods, services, or any other thing of value; or (IV) 2 of the following: (aa) Home address or telephone number. (bb) Mother’s maiden name, if identified as such. (cc) Month, day, and year of birth. (B) Modified definition by rulemaking If the Federal Trade Commission determines that the definition under subparagraph (A) is not reasonably sufficient to protect individuals from identity theft, fraud, or other unlawful conduct, the Commission by rule promulgated under section 553 of title 5, United States Code, may modify the definition of personal information under subparagraph (A) to the extent the modification will not unreasonably impede interstate commerce.