Guidance and reporting

(a) International coordination and cooperation (1) In general If necessary, the Commission shall coordinate any enforcement action by the Commission under this Act with any relevant data protection authority established by a foreign country or any similar office of a foreign country in a manner consistent with subsections (j) and (k) of section 6 of the Federal Trade Commission Act (15 U.S.C. 46). (2) International interoperability The Secretary of Commerce, in consultation with the Commission and the heads of other relevant Federal agencies, shall— (A) identify laws of foreign countries or regions that relate to the processing of personal data for commercial purposes; (B) engage with relevant officials of foreign countries or regions that have implemented laws described in subparagraph (A) in order to identify requirements under those laws that could disrupt cross-border transfers of personal data; (C) develop mechanisms and recommendations to prevent disruptions described in subparagraph (B); and (D) not later than 1 year after the date of enactment of this Act, and once a year each year thereafter for 5 years, submit to Congress a report on the progress of efforts made under this section. (b) Reports to Congress Not later than 180 days after the date of enactment of this Act, and not less frequently than annually thereafter, the Commission shall submit to Congress, and make available on a public website, a report that contains information relating to— (1) the effectiveness of this Act and regulations promulgated under this Act; (2) compliance with the provisions of this Act and regulations promulgated under this Act; (3) violations of the provisions of this Act and regulations promulgated under this Act; (4) enforcement actions by the Commission and State attorneys general for violations of the provisions of this Act and regulations promulgated under this Act; (5) priorities of the Commission in enforcing the provisions of this Act and regulations promulgated under this Act; and (6) resources needed by the Commission to fully implement and enforce the provisions of this Act and regulations promulgated under this Act. (c) Study and report by the Government Accountability Office Not later than 3 years after the date of enactment of this Act, and once every 3 years thereafter, the Comptroller General of the United States shall submit to the President and Congress a report that surveys Federal data privacy and security laws in order to— (1) identify any inconsistency between the requirements under this Act and the requirements under any law related to the privacy and security of personal data; (2) review the impact of the provisions of this Act on small businesses and provide recommendations, if necessary, to improve compliance and enforcement; (3) provide recommendations on amending Federal data privacy and security laws in light of changing technological and economic trends; and (4) detail the Federal data privacy and security enforcement activities carried out by the Commission and other Federal agencies.