; or (B) a credit monitoring or other service that enables consumers to detect the misuse of their personal information, beginning not later than 60 days following the individual’s request and continuing for a period of 5 years. (2) Rulemaking As part of the Commission’s rulemaking described in subsection (c)(5), the Commission shall determine the circumstances under which a covered entity required to provide notification under subsection (a) shall provide or arrange for the provision of free consumer credit reports or credit monitoring or other service to affected individuals. (f) Website notification of Federal Trade Commission If the Commission, upon receiving notification of any breach of security that is reported to the Commission under subsection (d)(1), finds that notification of such a breach of security via the Commission’s Internet website would be in the public interest or for the protection of consumers, the Commission shall place such a notification in a clear and conspicuous location on its Internet website. (g) Website notification of State attorneys general If a State attorney general, upon receiving notification of any breach of security that is reported to the Commission under subsection (d)(5), finds that notification of such a breach of security through the State attorney general’s Internet website would be in the public interest or for the protection of consumers, the State attorney general shall place such a notification in a clear and conspicuous location on its Internet website. (h) FTC study on notification in languages in addition to English Not later than 1 year after the date of enactment of this Act, the Commission shall conduct a study on the practicality and cost effectiveness of requiring the notification required by subsection (c)(1) to be provided in a language in addition to English to individuals known to speak only such other language. (i) Education and outreach for small businesses The Commission shall conduct education and outreach for small business concerns on data