; (F) protect the confidentiality of cyber threat indicators and defensive measures associated with specific persons to the greatest extent practicable; and (G) ensure all relevant constitutional, legal, and privacy protections are observed, including that information obtained from efforts to address cybersecurity risks and incidents is used only for such purposes, or as specifically authorized by law. . (b) Congressional oversight Not later than 2 years after the date of enactment of this Act, the national cybersecurity and communications integration center of the Department of Homeland Security shall provide to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate information on the activities and effectiveness of such activities under subsection (n) of section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 ), as added by subsection (a) of this section, on State and local information security. The center shall seek feedback from State and local governments regarding the effectiveness of such activities and include such feedback in the information required to be provided under this subsection.