; or (2) records or other information relating to a subscriber or customer of any electronic communication service or remote computing service (not including the content of such communications) pursuant to the Foreign Intelligence Surveillance Act of 1978 ( 50 U.S.C. 1801 et seq.), chapter 119 of title 18, United States Code (commonly known as the Wiretap Act ), or any other provision of Federal law not specifically amended by this Act. 9. National standard (a) Preemption For a controller that is subject to this Act, or any regulation promulgated pursuant to this Act, the provisions of this Act, or any such regulation, shall preempt any civil provision of the law of any State or political subdivision of a State to the degree the law is focused on the reduction of privacy risk through the regulation of the collection of sensitive personal information and the collection, storage, processing, sale, sharing with third parties, or other use of such information. (b) Consumer protection laws Except as provided in subsection (a), this section may not be construed to limit the enforcement, or the bringing of a claim pursuant to any State consumer protection law by an attorney general of a State, other than the extent to which any such law regulates the collection of sensitive personal information and the collection, storage, processing, sale, sharing with third parties, or other use of such information. (c) Protection of certain State law Nothing in this Act may be construed to preempt the applicability of any of the following: (1) State constitutional, trespass, contract, data breach notification, or tort law, other than to the degree such law is substantially intended to govern the collection of sensitive personal information and the collection, storage, processing, sale, sharing with third parties, or other use of such information. (2) Any other State law to the extent that the law relates to acts of fraud, wiretapping, or the protection of social security numbers. (3) Any State law to the extent the law provides