; or (ii) could be expected to cause damage to the national security; (B) communicates the determination made under subparagraph (A) to the covered entity; and (C) orders that notification required under section 211 not be made. (2) Immunity No nonconstitutional cause of action shall lie in any court against any Federal agency for acts relating to the exemption from notification for law enforcement or national security purposes under this title. (b) Safe harbor exemption A covered entity shall be exempt from the notice and identity theft prevention and mitigation service requirements under section 211 if the covered entity reasonably determines that sensitive personally identifiable information is rendered unusable, unreadable, or indecipherable through data security technology or methodology, including encryption or redaction, that is generally accepted by experts in the field of information security, such that there is no reasonable likelihood that a security breach has resulted in, or will result in, the misuse of data. 213. Methods of notice A covered entity shall be in compliance with section 211 if the covered entity provides the following: (1) Individual notice Notice to individuals by one of the following means if the method of notification selected can most likely be expected to reach the intended individual: (A) Written notification to the last known home mailing address of the individual in the records of the covered entity. (B) Telephone notice to the individual personally, provided that the telephone notice is made directly to each affected consumer, and is not made through a prerecorded message. (C) E-mail notice, if— (i) (I) the covered entity’s primary method of communication with the individual is by e-mail; or (II) the individual has consented to receive such notice and the notice is consistent with the provisions permitting electronic transmission of notices under section 101 of the Electronic Signatures in Global and National Commerce Act ( 15 U.S.C. 7001 )