; or (ii) that any particular piece of information, on its own, is sensitive personally identifiable information. (5) State The term State means each State of the United States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each federally recognized Indian tribe. (6) Unsecured sensitive personally identifiable information The term unsecured sensitive personally identifiable information means sensitive personally identifiable information that is not secured by a technology standard that— (A) renders information unusable, un­read­a­ble, or indecipherable to unauthorized individuals; and (B) is developed or endorsed by a standards developing organization that is accredited by the American National Standards Institute. 7. Relationship to State law This Act does not annul, alter, or affect, or exempt any person subject to the provisions of this Act from complying with, the laws of any State with respect to notification of a breach of personal information in electronic or digital form, except to the extent that those laws are inconsistent with any provision of this Act, and then only to the extent of the inconsistency. For purposes of this section, a State law is not inconsistent with this Act if the protection such law affords any consumer is greater than the protection provided by this Act. 8. Effective date This Act shall apply with respect to breaches that are discovered on or after the date that is 30 days after the date on which the Commission promulgates the regulations required by section 3(c).