; or (iii) a service provider of such covered entity. 3. Prohibition on waivers (a) In general The provisions under this Act may not be waived. Any agreement purporting to waive compliance with or modify any provision of this Act shall be void as contrary to public policy. (b) Prohibition on predispute arbitration agreements No predispute arbitration agreement shall be valid or enforceable with respect to any claims under this Act. 4. Effective date (a) In general This Act shall apply beginning on the date that is 1 year after the date of the enactment of this Act. (b) Authority To promulgate regulations and take certain other actions Nothing in subsection (a) affects the authority to take an action expressly required by a provision of this Act to be taken before the effective date described in such subsection. 5. Journalism protection (a) In general Covered entities engaged in journalism shall not be subject to the obligations imposed under this Act to the extent that those obligations directly infringe on the journalism rather than the business practices of the covered entity, so long as, the covered entity has technical safeguards and business processes that prevent the collection, processing, maintaining, or disclosure of such personal information for business practices other than journalism. (b) Journalism The term journalism includes the collecting, maintaining, processing, and disclosing of personal information about a public individual or official, or that otherwise concerns matters of public interest, for dissemination to the public. 6. Small business compliance ramp Upon losing its status as a small business, a covered entity shall have nine months to comply with provisions of this Act that a small business is exempt from complying with. 7. Criminal prohibition on disclosing personal information Chapter 41 of title 18, United States Code, is amended by adding at the end the following: 881. Disclosure of personal information with the intent to cause harm Whoever uses a channel of interstate or foreign