403(a) of the 21st Century IRS Act , and (II) any person subject to the requirements of section 7216 and which is a participant in such information sharing and analysis center. (ii) Information sharing agreement Such term shall not include any person unless such person has entered into a written agreement with the Secretary setting forth the terms and conditions for the disclosure of information to such person under this paragraph, including requirements regarding the protection and safeguarding of such information by such person. (C) Specified return information For purposes of this paragraph, the term specified return information means— (i) in the case of a return which is in connection with a case of potential identity theft refund fraud— (I) in the case of such return filed electronically, the internet protocol address, device identification, email domain name, speed of completion, method of authentication, refund method, and such other return information related to the electronic filing characteristics of such return as the Secretary may identify for purposes of this subclause, and (II) in the case of such return prepared by a tax return preparer, identifying information with respect to such tax return preparer, including the preparer taxpayer identification number and electronic filer identification number of such preparer, (ii) in the case of a return which is in connection with a case of a identity theft refund fraud which has been confirmed by the Secretary (pursuant to such procedures as the Secretary may provide), the information referred to in subclauses (I) and (II) of clause (i), the name and taxpayer identification number of the taxpayer as it appears on the return, and any bank account and routing information provided for making a refund in connection with such return, and (iii) in the case of any cybersecurity threat to the Internal Revenue Service, information similar to the information described in subclauses (I) and (II) of clause (i) with respect to such threat. (D) Restriction on use of