the use of a foreign court, the covered entity agrees to pay reasonable attorney fees necessary to enforce the judgment. (7) A default judgment, failure to comply with Agency investigative requests or orders, or failure to comply with United States court orders or decisions shall result in the immediate termination of the agreement. (f) Rule of construction against data localization Nothing in this section shall be construed to require the localization of processing or maintaining personal information by a covered entity to within the United States, or limit internal disclosing of personal information within a covered entity or to subsidiary or corporate affiliate of such covered entity, regardless of the country in which the covered entity will process, disclose, or maintain that personal information. 205. Prohibition on re-identification (a) In general Except as required under title I, a covered entity shall not use personal information collected from an individual, acquired from a third party, or acquired from publicly available information to re-identify an individual from de-identified information. (b) Third-Party prohibition A covered entity that discloses de-identified information to a third party shall prohibit such third party from re-identifying an individual using such de-identified information. (c) Exception Subsection (a) shall not apply to qualified research entities, as determined by the Director, conducting research not for commercial purposes. 206. Restrictions on collecting, processing, maintaining, and disclosing contents of communications (a) In general A covered entity may not collect, process, maintain, or disclose the contents of any communication, regardless of whether the sender or intended recipient of the communication is an individual, other person, or an electronic device, for any purpose other than— (1) transmitting or displaying the communication to any intended recipient or the original sender, or maintaining such communications for such purposes