; or (2) is not in compliance with all requirements of this Act. (b) Exception Notwithstanding subsection (a), a covered entity may disclose personal information where that personal information is limited to an identifier created primarily for the purpose of sending or receiving electronic communications and the sole purpose of disclosing is to send or receive an electronic communication at the request of the individual whose personal information is being disclosed. (c) Safe harbors for disclosing Notwithstanding subsection (a), a covered entity may disclose personal information to another covered entity (the receiving covered entity) that is not subject to the jurisdiction of the United States if either— (1) the receiving covered entity has entered into an agreement, as described in subsection (e), with the Agency, and— (A) the covered entity has a reasonable belief that the receiving covered entity is sufficiently solvent to compensate victims or pay fines for violations of this Act; (B) a contract between the covered entity and receiving covered entity requires that the receiving covered entity complies with this Act, and the covered entity has reason to believe the receiving covered entity is compliant with this Act; and (C) a contract between the covered entity and the receiving covered entity prohibits the receiving covered entity from using the disclosed personal information for any purpose other than provided in the contract; or (2) the covered entity has— (A) entered into an agreement with the receiving covered entity that— (i) requires the receiving covered entity to comply with this Act; (ii) prohibits the receiving covered entity from using the disclosed personal information for any purpose other than provided in the contract; (iii) requires the receiving covered entity to indemnify the covered entity against violations of this Act committed by the receiving covered entity for any amount the covered entity is unable to pay of a judgment for such violation