Amendment clarifies that the term "cybersecurity risk" does not apply to actions solely involving violations of consumer terms of service or consumer licensing agreements.

In section 2(a)(1), redesignate subparagraphs (A) and (B) as subparagraphs (B) and (C), respectively.

In section 2(a)(1), insert before subparagraph (B), as so redesignated, the following:

(A) by amending paragraph (1) to read as follows:

“(1)(A) except as provided in subparagraph (B), the term ‘cybersecurity risk' means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of such information or information systems, including such related consequences caused by an act of terrorism;

“(B) such term does not include any action that solely involves a violation of a consumer term of service or a consumer licensing agreement;”.