; and (2) file petitions for appeal of a decision in such civil action. (d) Construction Nothing in this section shall be construed— (1) to prevent the attorney general of a State, or other authorized State officer, from exercising the powers conferred on the attorney general, or other authorized State officer, by the laws of such State; or (2) to prohibit the attorney general of a State, or other authorized State officer, from proceeding in State or Federal court on the basis of an alleged violation of any civil or criminal statute of that State. (e) Limitation (1) No separate action An action may not be brought under subsection (a) if the same alleged violation is the subject of a pending action by the Commission or the United States. (2) Exclusive period to act by Commission An action— (A) may not be brought under subsection (a) until the expiration of the 60-day period that begins on the date on which a violation is discovered by the Commission or the date on which the Commission is notified of the violation; and (B) may only be brought under subsection (a) if the Commission does not bring an action related to the violation during such period. 6. Privacy and data security employees and funding for the Commission (a) Employment authority The Commission shall hire 50 new full-time employees to focus on privacy and data security, 15 of which shall have technology expertise. (b) Additional funding for privacy and data security There is authorized to be appropriated to the Commission $35,000,000 for issues related to privacy and data security. 7. Definitions In this Act: (1) Call detail record The term call detail record — (A) means session-identifying information (including an originating or terminating telephone number, an International Mobile Subscriber Identity number, or an International Mobile Station Equipment Identity number), a telephone calling card number, or the time or duration of a call