; and (C) covered data that is collected by a covered entity or the covered entity’s service provider about an individual (or a relative of an individual) who is an employee or former employee of the covered entity for the purpose of administering benefits to which such individual or relative is entitled on the basis of the individual’s employment with the covered entity, provided that such data is retained or processed by the covered entity or the covered entity’s service provider solely for the purpose of administering such benefits. (13) Executive agency The term Executive agency has the meaning given such term in section 105 of title 5, United States Code. (14) Individual The term individual means a natural person residing in the United States, however identified, including by any unique identifier. (15) Large data holder The term large data holder means a covered entity that, in the most recent calendar year— (A) processed or transferred the covered data of more than 5,000,000 individuals, devices used by individuals or households, or households; or (B) processed or transferred the sensitive covered data of more than 100,000 individuals, devices used by individuals or households, or households. (16) Process The term process means any operation or set of operations performed on covered data including collection, analysis, organization, structuring, retaining, using, or otherwise handling covered data. (17) Processing purpose The term processing purpose means an adequately specific and granular reason for which a covered entity processes covered data that clearly describes the processing activity. (18) Publicly available information (A) In general The term publicly available information means— (i) information that a covered entity has a reasonable basis to believe is lawfully made available to the general public from widely distributed media