; and (ii) includes any entity that collects commercial credit data; and (B) the term small business concern has the meaning given the term in section 3 of the Small Business Act ( 15 U.S.C. 632 ). (2) Report Not later than 1 year after the date of enactment of this Act, the Comptroller General of the United States shall submit to Congress a report regarding the economic harm incurred by small business concerns as a result of data breaches at credit reporting companies.