; (2) communications are intercepted, acquired, or accessed only to the extent necessary to mitigate the reasonable threat that an unmanned aircraft system or unmanned aircraft poses to the safety or security of a covered facility or asset; (3) records of such communications are maintained only for as long as necessary and in no event for more than 180 days unless the Secretary of Homeland Security or the Attorney General reasonably determine that maintenance of such records— (A) is necessary to support one or more safety or security functions of the Department of Homeland Security or the Department of Justice, respectively; or (B) is required for a longer period to support a law enforcement agency or by any other applicable law or regulation; and (4) such communications are not disclosed outside the Department of Homeland Security or the Department of Justice unless the disclosure, subject to paragraph (a)(1) above— (A) would fulfill a safety or security function of the Department of Homeland Security or the Department of Justice; (B) would support the Department of Defense, a civilian law enforcement agency, or the enforcement activities of a regulatory agency of the Federal Government in connection with a criminal or civil investigation of, or any regulatory action with regard to, an action described in subsection (b)(1); or (C) is otherwise required by law or regulation. (f) Scope of authority Nothing in this section shall be construed to provide the Secretary of Homeland Security or the Attorney General additional authorities beyond those described in (b)(1) without authorization by law. (g) Report to Congress The Attorney General and Secretary of Homeland Security, shall each submit to Congress, not later than one year after enactment, and each year thereafter, a report that shall include, at minimum— (1) a description of actions taken, guidance provided, and rules made pursuant to this section, including a summary of public comments submitted in relation to such guidance or rules