; and (6) represent the United States in international forums. 3. Definitions In this Act: (1) Agency The term Agency means the Data Protection Agency established under section 4. (2) Covered entity The term covered entity means any person that collects, processes, or otherwise obtains personal data with the exception of an individual processing personal data in the course of personal or household activity. (3) Federal privacy law (A) In general The term Federal privacy law means the provisions of this Act, the laws specified in subparagraph (B), and any rule or order prescribed by the Agency under this Act or pursuant to the authorities transferred under this Act. Such term shall not include the Federal Trade Commission Act ( 15 U.S.C. 41 et seq.). (B) Specified laws The laws specified in this subparagraph are the following laws (including any amendments made by such laws): (i) The Children’s Online Privacy Protection Act ( 15 U.S.C. 6501 et seq.). (ii) The CAN–SPAM Act of 2003 (15 U.S.C 7701 et seq.). (iii) The Do-Not-Call Implementation Act ( 15 U.S.C. 6152 et seq.) and Public Law 108–82 ( 15 U.S.C. 6151 ). (iv) The Fair Credit Reporting Act ( 15 U.S.C. 1681 et seq.). (v) Title V of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 et seq.). (vi) Subtitle D of the Health Information Technology for Economic and Clinical Health Act ( 42 U.S.C. 17921 et seq.). (vii) The Identity Theft Assumption and Deterrence Act of 1998 (Pub. L. 105–318). (viii) The Telemarketing and Consumer Fraud and Abuse Prevention Act ( 15 U.S.C. 6101 et seq.). (ix) Section 227 of the Communications Act of 1934 ( 47 U.S.C. 227 ) (commonly known as the Telephone Consumer Protection Act of 1991 ). (4) High-risk data practice The term high-risk data practice means an action by a covered entity that involves— (A) a systematic or extensive evaluation of personal data that is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the individual or household or similarly significantly