; and (ii) does not divulge health data to any individual or entity other than such covered entity or a contractor to such service provider bound to information processing terms no less restrictive than terms to which such service provider is bound. (B) Limitation of application Such individual or entity shall only be considered a service provider in the course of activities described in subparagraph (A)(i). (C) Minimization by service providers For purposes of section 2, a request from an individual to a covered entity for a product or service, and an express consent from the individual to the covered entity, shall be treated as having also been provided to the service provider of the covered entity. (11) State The term State means each of the several States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each Federally recognized Indian Tribe. (12) Third party The term third party means, with respect to the disclosing or collecting of health data, any individual or entity that is not— (A) the covered entity that is disclosing or collecting such information; (B) the individual to whom such information relates; or (C) a service provider. (13) Ultimate parent entity The term ultimate parent entity has the meaning given the term in section 801.1 of title 16, Code of Federal Regulations (or a successor regulation). (b) Rulemaking (1) In general Not later than 180 days after the date of enactment of this Act, the Commission shall conduct a rulemaking pursuant to section 553 of title 5, United States Code, to define the terms public health campaign and data for purposes of implementing and enforcing this Act. (2) Requirement For purposes of the rulemaking required under paragraph (1), the term data shall include information that is linked, or reasonably linkable, to— (A) specific individuals