; and (II) the first and last name of a consumer in combination with— (aa) the consumer’s driver’s license number, passport number, military identification number, or other similar number issued on a government document used to verify identity; (bb) information that could be used to access a consumer’s account, such as a user name and password or e-mail and password; or (cc) biometric data of the consumer used to gain access to financial accounts of the consumer. (ii) Exception The term sensitive personal information does not include publicly available information that is lawfully made available to the general public and obtained from— (I) Federal, State, or local government records; or (II) widely distributed media. .