; and (vii) does not link the personal information provided by another covered entity to personal information from any other source. (B) Treatment A covered entity shall be treated as a service provider under this Act only to the extent that such covered entity is acting as a service provider, as defined in subparagraph (A). (31) Significant privacy harm The term significant privacy harm means adverse consequences to an individual arising from the collecting, processing, maintaining, or disclosing of personal information or contents of communications, limited to subparagraph (A), (B), or (D) of paragraph (23). (32) Small business The term small business means a covered entity that— (A) does not earn revenue from the sale of personal information; (B) earns less than half of annual revenues from the processing of personal information for targeted or personalized advertising; (C) has not, in combination with each subsidiary and affiliate of the service, maintained personal information of 250,000 or more individuals for 3 or more of the preceding 12 months; (D) has fewer than 200 employees