; (ii) a conspicuous notice on the Internet website of the person (if such person maintains such a website); and (iii) notification in print and to broadcast media, including major media in metropolitan and rural areas where the individuals whose personal information was acquired reside. (C) Content of substitute notice Each form of substitute notice under this paragraph shall include— (i) notice that individuals whose personal information is included in the breach of security are entitled to receive, at no cost to the individuals, consumer credit reports on a quarterly basis for a period of 5 years, credit monitoring or other service that enables consumers to detect the misuse of their personal information for a period of 10 years, and instructions on requesting such reports or service from the person, except when the only information which has been the subject of the security breach is the individual’s first name or initial and last name, or address, or phone number, in combination with a credit or debit card number, and any required security code