information. (J) Information revealing online activities over time and across third party websites or online services. (K) Calendar information, address book information, phone or text logs, photos, or videos maintained on an individual’s device. (L) A photograph, film, video recording, or other similar medium that shows the naked or undergarment-clad private area of an individual. (M) Any other covered data processed or transferred for the purpose of identifying the above data types. (N) Any other covered data that the Commission determines to be sensitive covered data through a rulemaking pursuant to section 553 of title 5, United States Code. (21) Service provider (A) In general The term service provider means a covered entity that processes or transfers covered data in the course of performing a service or function on behalf of, and at the direction of, another covered entity, but only to the extent that such processing or transferral— (i) relates to the performance of such service or function