. . . . "Expands the definition of personal information to include health insurance, medical information, financial information and online account information, such as security questions and answers, email addresses, and passwords" .