; and (II) that— (aa) is widely and publicly available and was not made publicly available in bad faith; and (bb) contains no restrictions on who can access and view such information. (iii) Personally identifiable information reported in public media. (iv) Personally identifiable information dedicated to contacting an individual at the individual's place of work. (3) Covered entity The term covered entity means an entity— (A) that collects covered data concerning individuals; (B) that— (i) has gross annual revenue in excess of $25,000,000; (ii) annually buys, receives, sells, or shares covered data of 50,000 or more individuals; or (iii) derives 50 percent or more of its annual revenue from selling individuals' covered data; and (C) that is— (i) a person over which the Commission has authority pursuant to section 5(a)(2) of the Federal Trade Commission Act ( 15 U.S.C. 45(a)(2) ); (ii) a common carrier subject to the Communications Act of 1934 ( 47 U.S.C. 151 et seq.), notwithstanding the definition of the term Acts to regulate commerce in section 4 of the Federal Trade Commission Act ( 15 U.S.C. 44 ) and the exception provided by section 5(a)(2) of the Federal Trade Commission Act ( 15 U.S.C. 45(a)(2) ) for such carriers