; and (ii) includes an entity that collects commercial credit data. (2) Small business concern The term small business concern has the meaning given such term under section 3 of the Small Business Act ( 15 U.S.C. 632 ). (3) Report Not later than 1 year after the date of enactment of this Act, the Comptroller General of the United States shall submit to Congress a report regarding the economic harm incurred by small business concerns as a result of data breaches at credit reporting companies.