; or (B) unauthorized access, destruction, use, modification, or disclosure of personal information described in subparagraph (A). (2) Notice If a covered data broker determines that personal information of an individual that is collected, assembled, or maintained by the covered data broker has been lost or the subject of unauthorized access, destruction, use, modification, or disclosure, the covered data broker shall notify the individual of the loss, access, destruction, use, modification, or disclosure. (h) Persons regulated by the Fair Credit Reporting Act A covered data broker shall be considered to be in compliance with subsections (a) through (f) of this section with respect to information that is subject to the Fair Credit Reporting Act ( 15 U.S.C. 1681 et seq.) if the covered data broker is in compliance with sections 609, 610, and 611 of that Act ( 15 U.S.C. 1681g , 1681h, 1681i). 5. Use limitations (a) In general A covered data broker shall not use personal information for unreasonable purposes, including— (1) selling, leasing, trading, or otherwise profiting from an individual’s biometric information; (2) sharing, resharing, or otherwise disseminating an individual’s biometric information without first obtaining specific consent from the individual, unless— (A) the dissemination is required by State or Federal law or municipal ordinance; or (B) the dissemination is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction