; and (ii) where the judges’ personally identifiable information was found. (B) States and local governments States and local governments that receive funds under this section shall submit to the Comptroller General a report on data described in clauses (i) and (ii) of subparagraph (A) to be included in the report required under that subparagraph. (c) Data brokers and other businesses (1) Prohibition (A) Data brokers It shall be unlawful for a data broker to sell, license, trade, purchase, or otherwise provide or make available for consideration judges’ personally identifiable information. (B) Other businesses No person, business, or association shall publicly post or publicly display on the internet judges’ personally identifiable information if the at-risk individual has, either directly or through an agent, made a written request of that person, business, or association to not disclose the judges’ personally identifiable information of the at-risk individual or that of the at-risk individual’s immediate family. (C) List The Administrative Office of the United States Courts may, upon request, act as an agent and provide data brokers with a current list of Federal judges and their immediate family for the purpose of maintaining compliance with this section. (2) Required conduct (A) In general After a person, business, or association has received a written request from an at-risk individual to protect the judges’ personally identifiable information, that person, business, or association shall have 72 hours to remove the judges’ personally identifiable information from the internet. (B) Information protected After a person, business, or association has received a written request from an at-risk individual, that person, business, or association shall ensure that the at-risk individual’s judges’ personally identifiable information is not made available on any website or subsidiary website controlled by that person, business, or association. (C) Transfer After receiving an at-risk individual’s written request, no