connections. 142. Notice to individuals (a) In general A covered entity that owns or possesses data in electronic form containing personally identifiable information, following the discovery of a breach of security of the system maintained by the covered entity that contains such information, shall notify— (1) each individual who is a citizen or resident of the United States and whose personally identifiable information has been, or is reasonably believed to have been, acquired or accessed from the covered entity as a result of the breach of security