any confidential commercial information, including an algorithm used to derive credit scores or other risk scores or predictors;

any information collected by the covered person for the purpose of preventing fraud or money laundering, or detecting, or making any report regarding other unlawful or potentially unlawful conduct;

any information required to be kept confidential by any other provision of law; or

any information that the covered person cannot retrieve in the ordinary course of its business with respect to that information.

impose substantively similar requirements on covered persons;

take into account conditions under which covered persons do business both in the United States and in other countries; and

do not require or promote the use of any particular technology in order to develop systems for compliance.