; or (2) requires mandatory arbitration related to the breach. (b) Violation of rule A violation of subsection (a) shall be treated as a violation of a rule defining an unfair or deceptive act or practice prescribed under section 18(a)(1)(B) of the Federal Trade Commission Act ( 15 U.S.C. 57a(a)(1)(B) ). (c) Powers of commission The Commission shall enforce this section in the same manner, by the same means, and with the same jurisdiction, powers, and duties as though all applicable terms and provisions of the Federal Trade Commission Act ( 15 U.S.C. 41 et seq.) were incorporated into and made a part of this Act. Any person who violates subsection (a) shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act. 4. Definitions In this Act: (1) Breach of security The term breach of security means the unauthorized acquisition of data in electronic form containing personal information. (2) Bureau The term Bureau means the Consumer Financial Protection Bureau. (3) Commission The term Commission means the Federal Trade Commission. (4) Consumer reporting agency The term consumer reporting agency has the meaning given the term consumer reporting agency that compiles and maintains files on consumers on a nationwide basis in section 603(p) of the Fair Credit Reporting Act ( 15 U.S.C. 1681a(p) ). (5) Data in electronic form The term data in electronic form means any data stored electronically or digitally on any computer system or other database and includes recordable tapes and other mass storage devices. (6) Encryption The term encryption means the protection of data in electronic form in storage or in transit using an encryption technology that has been adopted by an established standards setting body which renders such data indecipherable in the absence of associated cryptographic keys necessary to enable decryption of such data. Such encryption must include appropriate management and safeguards of such keys to protect the integrity of the encryption. (7)