(a) A covered entity shall comply with 15 U.S.C. Sections 6802 and 6803, as amended, in the same manner as a financial institution is required to comply under those sections.
(b) An entity that is a nonaffiliated third party in relation to a covered entity shall comply with 15 U.S.C. Section 6802(c), as amended.