Required audit and review

(a) In general Not later than 180 days after the date of the enactment of this Act, the Inspector General of the Department of Homeland Security, in coordination with the Department of Homeland Security Privacy Office and the Office for Civil Rights and Civil Liberties, shall conduct an audit and review of all covered surveillance technologies used by the Department. (b) Required contents The audit and review required under subsection (a) shall examine— (1) the categories and sources of data collected, compiled, or aggregated; (2) whether data relating to United States citizens is collected, retained, or analyzed; (3) the use of facial recognition technologies; (4) the use of commercial data brokers or telemetry data; (5) data retention and deletion practices; (6) contractor access to Federal Government data; (7) privacy and civil liberties impacts; (8) the use of technologies and information collected in connection with lawful protest, assembly, or protected speech; (9) the use of technologies and information collected in connection with immigration enforcement operations; (10) the accuracy and reliability of predictive or probabilistic systems; and (11) compliance with applicable Federal privacy and civil liberties laws.