sale, sharing with third parties, or other use of such information. (2) Any other State law to the extent that the law relates to acts of fraud, wiretapping, or the protection of social security numbers. (3) Any State law to the extent the law provides additional provisions to specifically regulate the covered entities as defined for purposes of the regulations promulgated pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( Public Law 104–191 ), section 444 of the General Education Provisions Act (commonly known as the Family Educational Rights and Privacy Act of 1974) ( 20 U.S.C. 1232g ), the Fair Credit Reporting Act ( 15 U.S.C. 1681 et seq.), or the Gramm-Leach-Bliley Act ( 15 U.S.C. 6701 et seq.). (4) Any private contract based on a State law that requires a party to provide additional or greater privacy for sensitive personal information or data security protections to an individual than this Act, or any regulation promulgated pursuant to this Act. 10. Effective date This Act shall take effect 180 days after the date of the enactment of this Act.