template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, and sleep, health, or exercise data that contain identifying information. (6) Health insurance information The term health insurance information means an individual’s insurance policy number or subscriber identification number, any unique identifier used by a health insurer to identify a person, or any information in the individual’s application and claims history. (7) Categories of personal information The term categories of personal information means the enumerated categories of information described in clauses (i) through (xi) of paragraph (4)(A), except as modified pursuant to regulations or guidance of the Commission pursuant to section 359(b). (8) Verifiable request The term verifiable request means a request made by an individual that a covered entity can reasonably verify, pursuant to regulations adopted by the Commission pursuant to section 359, to be the individual about whom the covered entity has collected information. (9) Collect or collected The terms collect or collected mean, with respect to an individual, any personal information that is gathered directly from that individual. (10) Received The term received means any individual’s personal information that is not collected by a covered entity directly from that individual, including any personal information that is bought, rented, licensed, acquired, or accessed, by a covered entity from any third party. (11) Obtained The term obtained means any personal information that is either collected or received. (12) Processing The term processing means any operation or set of operations that are performed on personal information or on sets of personal information, whether or not by automated means. (13) Third party The term third party means a person who is not— (A) the person that collects an individual’s personal information directly from that individual