; (ii) the Bureau; and (iii) appropriate law enforcement and intelligence agencies, as identified by the Secretary of Homeland Security; and (B) not later than 3 days after the date on which the consumer reporting agency discovers the data breach, and as quickly and efficiently as is practicable, each affected individual with respect to the data breach; (2) may receive an extension of the 2-day deadline described in paragraph (1)(A) or the 3-day deadline described in paragraph (1)(B) if the Federal Trade Commission and the intelligence agencies identified under paragraph (1)(A)(iii) determine that there is a national security concern that requires granting such an extension; (3) shall, upon request by any affected individual with respect to the data breach, provide, without charge to the affected individual and during the lifetime of the affected individual— (A) a credit freeze, including the cost relating to imposing, lifting, or permanently removing a credit freeze, with respect to the consumer report of the affected individual at any consumer reporting agency described in section 603(p); and (B) credit monitoring services for the affected individual at any consumer reporting agency described in section 603(p); and (4) shall, in consultation with the Bureau, establish a consumer assistance unit— (A) that shall— (i) be carried out, and paid for, by the consumer reporting agency; and (ii) provide assistance, free of charge and for a period of 10 years beginning on the date on which the consumer reporting agency submits the notifications required under paragraph (1)(A), to any affected individual who wants to dispute an item in the file of the affected individual that was entered into that file after the date on which the data breach occurred