; or (ii) a credit monitoring or other service that enables consumers to detect the misuse of their personal information, beginning not later than 60 days following the individual’s request and continuing for a period of 10 years. (B) Rulemaking The circumstances under which a covered entity required to provide notification under paragraph (1) shall provide or arrange for the provision of free consumer credit reports or credit monitoring or other service to affected individuals. (b) Website notification (1) Federal Trade Commission If the Commission, upon receiving notification of any breach of security that is reported to the Commission under subsection (a)(5)(A), finds that notification of such a breach of security through the website of the Commission would be in the public interest or for the protection of consumers, the Commission shall place such a notification in a clear and conspicuous location on the website. (2) Other Federal agency If another Federal agency (such as the Federal Communications Commission, the Consumer Financial Protection Bureau, or the Department of Justice) receives notice of a breach of security from a covered entity and finds that notification of such a breach of security through the website of the Commission would be in the public interest or for the protection of consumers, that Federal agency shall place such a notification in a clear and conspicuous location on the website of that agency. (c) Website notification of State attorneys general If a State attorney general, upon receiving notification of any breach of security that is reported to the Commission under subsection (d)(5), finds that notification of such a breach of security through the State attorney general’s internet website would be in the public interest or for the protection of consumers, the State attorney general shall place such a notification in a clear and conspicuous location on its internet website. (d) FTC study on notification in languages in addition to English Not later than 1 year after the date of