; (B) earns less than half of annual revenues from the processing of personal information for targeted or personalized advertising; (C) has not, at any time during the preceding 6-month period, maintained personal information of 250,000 or more individuals; (D) has fewer than 200 employees; and (E) received less than $25,000,000 in gross revenue in the preceding 12-month period. (24) State The term State means each State of the United States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each federally recognized Indian Tribe. (25) Third party The term third party means, with respect to a covered entity, a person— (A) to whom such covered entity disclosed personal information; and (B) is not— (i) such covered entity; (ii) a subsidiary or corporate affiliate of such covered entity