; (B) no information about the data components used in the system is revealed by the system to the Department or any other party, except as incorporated into the outcome metrics described in section 5; and (C) no data or information that can identify an individual is revealed by the system to the Department or any other party; (2) (A) permit only the Office of the Commissioner, directly and not by grant or contract, to perform statistical queries necessary to determine the outcome metrics described in section 5 using the data components submitted by the reporting entities; and (B) prohibit, using commercially available technology, any other queries by the Department or any other party through the system; (3) be resistant, to the extent possible using commercially available technology, to attempts by any party to individually identify individuals in the data components submitted by reporting entities; and (4) minimize, to the extent possible using commercially available technology, the privacy risks to individuals whose data has been submitted by a reporting entity that could result from data breaches of any system operated by the reporting entity. (c) Considerations In designing, establishing, and maintaining the higher education data system, the Secretary, acting through the Commissioner, shall use the best available cybersecurity and privacy-enhancing technologies to protect the data collected under such system and the privacy of the underlying individuals. In designing the data system, the Commissioner— (1) shall use secure multiparty computation technologies; or (2) may utilize technology other than secure multiparty computation technologies if the other technology— (A) fully complies with subparagraphs (A) through (C) of subsection (b)(1)