; (2) enforcement actions taken by the Commission with respect to violations of such requirements; and (3) other areas determined appropriate by the Commission. (b) Annual report Not later than 1 year after the date of the enactment of this Act, and annually thereafter the Commission shall submit to Congress a report on the review conducted under subsection (a), together with recommendations for such legislation and administrative action as the Commission determines appropriate. 5. Definitions In this section: (1) Brokered personal information The term brokered personal information means any personal information that is categorized or organized for sale to a third party. (2) Business (A) In general The term business means a commercial entity, including a sole proprietorship, partnership, corporation, association, limited liability company, or other group, however organized and whether or not organized to operate at a profit, including a financial institution organized, chartered, or holding a license or authorization certificate under the laws of a State, the United States, or any other country, or the parent, affiliate, or subsidiary of a financial institution. (B) Exclusion The term business does not include a State, a State agency, any political subdivision of a State, or a vendor acting solely on behalf of, and at the direction of, a State. (3) Commission The term Commission means the Federal Trade Commission. (4) Consumer The term consumer means an individual residing in the United States acting in a personal, family, or household capacity. (5) Data broker (A) In general The term data broker means a business that collects or obtains a consumer’s personal information and sells, licenses, trades, or provides for consideration that information to another business with whom a consumer does not have a direct relationship. (B) Direct relationship For purposes of subparagraph (A), a direct relationship with a business exists if the consumer— (i) is a current customer