definiens: means any a pplicable Law or directive issued by a Governmental Entity, in each case governing : ( a ) th e privacy, protection, or security of Protected Inf ormation, including as relevant to the collection, storage, u se, processing, transfer, disclosure, sharing and d estruction of Protected Information or ( b ) online behavioral adve rtising, tracking technologies, call or electronic monitoring or recording, or any outbound calling and text messagi ng, telemarketing and email marketing . Without limi ting the foregoing, includes the following, in each case as applicable as of the date hereof : the Federal Trade Commission Act, the Telephone Consumer Protection Act, the Telemarketin g and Consumer Fraud and Abuse Prevention Act, the Contro lling the Assault of Non - Solicited Pornography and Marketing Act of 2003, the Children ’s Online Privac y Protection Act, the Computer Fraud and Abuse Act, the Electronic Communications Privacy Act, the Fair Cre dit Reporting Act, the Fair and Accurate Credit Rep orting Act, the Health Insurance Portability and Accountab ility Act of 1996, as amended and supplemented by t he Health Information Technology for Economic and Clin ical Health Act of the American Recovery and Reinvestment Act of 2009 ( together, ), the G ramm - Leach - Bliley Act, state data security -5- laws, state social security number protection laws, state data breach notification laws, state consume r protection laws, state biometric privacy laws, the GDPR ( and a ny European Union member states ’ laws and regulatio ns implementing it ), the EU e - Privacy Directive 2002/5 8 / EC as amended by Directive 2009/136 / EC or further amended or replaced from time to time ( and any Euro pean Union member states ’ laws and regulations implementing it ), the UK Data Protection Act 2018, the EU - US and Swiss - US Privacy Shield Frameworks, t he Canadian Personal Information Protection and Electr onic Documents Act, India ’s Information Technology Act, Japan ’s Act on the Protection of Personal Informati on, Hong Kong ’s Personal Data ( Privacy ) Ordinance, and Australia ’s Privacy Amendment ( Private Sector ) Act 2000, as amended by the Privacy Amendment ( Enhancin g Privacy Protection ) Act 2012, and other applicable data protection laws of the jurisdictions in which NanoString or its Subsidiaries operate the Business