of personal information under subparagraph (A). (7) Small business concern The term small business concern has the meaning given that term in section 3 of the Small Business Act ( 15 U.S.C. 632 ). (8) State The term State means each of the several States, the District of Columbia, the Commonwealth of Puerto Rico, Guam, American Samoa, the United States Virgin Islands, the Commonwealth of the Northern Mariana Islands, any other territory or possession of the United States, and each federally recognized Indian Tribe. 6. Effect on other laws (a) Effect on State data security and breach notification laws This Act supersedes any provision of a statute or regulation of a State or political subdivision of a State, with respect to a covered entity, that expressly— (1) requires information security practices for the treatment and protection of personal information similar to any of those required under section 2