defensive measure
(B)The term “defensive measure” does not include a measure that destroys, renders unusable, provides unauthorized access to, or substantially harms an information system or information stored on, processed by, or transiting such information system not owned by— (i)the private entity operating the measure; or (ii)another entity or Federal entity that is authorized to provide consent and has provided consent to that private entity for operation of such measure.