; and (2) by adding at the end the following: (d) Sensitive personal data defined In subsection (b)(3), the term sensitive personal data means any of the following: (1) Personally identifiable information, including the following: (A) Financial data that could be used to analyze or determine an individual’s financial distress or hardship. (B) The set of data in a consumer report, as defined under section 603 of the Fair Credit Reporting Act ( 15 U.S.C. 1681a ), unless such data is obtained from a consumer reporting agency for one or more purposes identified in subsection (a) of such section. (C) The set of data in an application for health insurance, long-term care insurance, professional liability insurance, mortgage insurance, or life insurance. (D) Data relating to the physical, mental, or psychological health condition of an individual. (E) Non-public electronic communications, including email, messaging, or chat communications, between or among users of a United States business’s products or services if a primary purpose of such product or service is to facilitate third-party user communications. (F) Geolocation data collected using positioning systems, cell phone towers, or WiFi access points such as via a mobile application, vehicle GPS, other onboard mapping tool, or wearable electronic device. (G) Biometric enrollment data including facial, voice, retina/iris, and palm/fingerprint templates. (H) Data stored and processed for generating a Federal, State, tribal, territorial, or other government identification card. (I) Data concerning United States Government personnel security clearance status. (J) The set of data in an application for a United States Government personnel security clearance or an application for employment in a position of public trust. (2) Genetic information, which includes the results of an individual’s genetic tests, including any related genetic sequencing data, whenever such results, in isolation or in combination with previously released or publicly available data, constitute