Report

Not later than 1 year after the date of enactment of this Act, the Comptroller General of the United States (referred to in this section as the Comptroller General) shall submit to Congress a report containing— (1) an analysis of— (A) the enforcement of this Act; (B) whether additional resources or enforcement authorities may be necessary to protect the national security interests of the United States from threats posed by data brokers selling the sensitive personal information of people in the United States; and (C) whether the national security interests of the United States would be advanced by expanding the protections of this Act to additional categories of individuals or types of personal information; and (2) recommendations for such legislation and administrative action as the Comptroller General determines appropriate.