; (III) such person or, if such person is incapable of providing consent, a third party legally authorized to consent on behalf of such person, has provided consent for the access on a case-by-case basis; or (IV) (aa) the communications content or information is accessed and used for the sole purpose of identifying targeted recipients of malicious software and preventing or mitigating harm from such malicious software; (bb) other than malicious software and cybersecurity threat signatures, no communications content or other information are accessed or reviewed