Unless subject to a delay authorized under paragraph (2), a notification required under subsection (a) shall be made not later than 30 days following the discovery of a breach of security, unless the person providing notice can show that providing notice within such a timeframe is not feasible due to extraordinary circumstances necessary to prevent further breach or unauthorized disclosures, and reasonably restore the integrity of the data system, in which case such notification shall be made as promptly as possible. (2) Delay of notification authorized for law enforcement or national security purposes (A) Law enforcement If a Federal, State, or local law enforcement agency determines that the notification required under this section would impede a civil or criminal investigation, such notification shall be delayed upon the written request of the law enforcement agency for 30 days or such lesser period of time which the law enforcement agency determines is reasonably necessary and requests in writing. A law enforcement agency may, by a subsequent written request, revoke such delay or extend the period of time set forth in the original request made under this paragraph if further delay is necessary. (B) National security If a Federal national security agency or homeland security agency determines that the notification required under this section would threaten national or homeland security, such notification may be delayed for a period of time which the national security agency or homeland security agency determines is reasonably necessary and requests in writing. A Federal national security agency or homeland security agency may revoke such delay or extend the period of time set forth in the original request made under this paragraph by a subsequent written request if further delay is necessary. (d) Method and content of notification (1) Direct notification (A) Method of notification A person required to provide notification to individuals under subsection (a)(1) shall be in compliance with such requirement if