; and (2) the head of the Federal entity described in paragraph (1) shall promptly conduct the review. (f) Role of non-Federal entities The Department may share information about election cybersecurity incidents, threats, and vulnerabilities through a non-Federal entity, such as the Multi-State Information Sharing and Analysis Center. (g) Protection of personal and confidential information If a Federal entity shares information about an election cybersecurity incident, threat, or vulnerability, the Federal entity shall— (1) minimize the acquisition, retention, use, and disclosure of personal information of voters, except as necessary to identify, protect against, detect, respond to, or recover from election cybersecurity incidents, threats, and vulnerabilities