(A) In general The term service provider means a person that collects, uses, or discloses emergency health data for the sole purpose of, and only to the extent that such entity is, conducting business activities on behalf of, for the benefit of, under instruction of, and under contractual agreement with a covered organization. (B) Limitation of application Such person shall only be considered a service provider in the course of activities described in subparagraph (A). (C) Exclusions The term service provider excludes a person that develops or operates a website, web application, mobile application, or smart device application for the purpose of tracking, screening, monitoring, contact tracing, or mitigation, or otherwise responding to the COVID–19 public health emergency. (16) State The term State means each State of the United States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each federally recognized Indian Tribe. (17) Third party (A) In general The term third party means, with respect to a covered organization— (i) another person to whom such covered organization disclosed emergency health data