; (B) to prevent further breach or unauthorized disclosures; or (C) to reasonably restore the integrity of the data system. (d) Method and content of notification (1) Direct notification (A) Method of direct notification A covered entity shall be in compliance with the notification requirement under subsection (a)(1) if— (i) the covered entity provides conspicuous and clearly identified notification— (I) in writing; or (II) by e-mail or other electronic means if— (aa) the covered entity's primary method of communication with the individual is by e-mail or such other electronic means; or (bb) the individual has consented to receive notification by e-mail or such other electronic means and such notification is provided in a manner that is consistent with the provisions permitting electronic transmission of notices under section 101 of the Electronic Signatures in Global and National Commerce Act ( 15 U.S.C. 7001 ); and (ii) the method of notification selected under clause (i) can reasonably be expected to reach the intended individual. (B) Content of direct notification Each method of direct notification under subparagraph (A) shall include— (i) the date, estimated date, or estimated date range of the breach of security; (ii) a description of each type of personal information that was or is reasonably believed to have been acquired or accessed as a result of the breach of security; (iii) a telephone number that an individual can use at no cost to the individual to contact the covered entity to inquire about the breach of security or the information the covered entity maintained or possessed about that individual; (iv) notice that the individual may be entitled to consumer credit reports under subsection (e)(1); (v) instructions how an individual can request consumer credit reports under subsection (e)(1); (vi) a telephone number, that an individual can use at no cost to the individual, and an address to contact each major credit reporting agency