; (2) each privacy policy described in paragraph (1) should be periodically reviewed and updated as necessary; and (3) each privacy policy described in paragraph (1) should be publicly available. 379. Commercial and governmental operators (a) In general Not later than 270 days after the date of enactment of this Act, the Administrator shall, to the extent practicable and consistent with applicable law, make available in a single location on the website of the Department of Transportation: (1) Any certificate of waiver or authorization issued by the Administration to Federal, State, tribal or local governments for the operation of unmanned aircraft systems within 30 days of issuance of such certificate of waiver or authorization. (2) A spreadsheet of UAS registrations, including the city, state, and zip code of each registered drone owner, on its website that is updated once per quarter each calendar year. (3) Summary descriptions and general purposes of public unmanned aircraft operations, including the locations where such unmanned aircraft may generally operate. (4) Summary descriptions of common civil unmanned aircraft operations. (5) The expiration date of any authorization of public or civil unmanned aircraft operations. (6) Links to websites of State agencies that enforce any applicable privacy laws. (7) For any unmanned aircraft system, except with respect to any operation protected by the First Amendment to the Constitution of the United States, that will collect personally identifiable information about individuals, including the use of facial recognition— (A) the circumstance under which the system will be used; (B) the specific kinds of personally identifiable information that the system will collect about individuals; and (C) how the information referred to in subparagraph (B), and the conclusions drawn from such information, will be used, disclosed, and otherwise handled, including— (i) how the collection or retention of such information that is unrelated to the specific use will be minimized