and expertise to provide the Secretary access to de-identified data consistent with the requirements of this subsection. (ii) An information technology infrastructure in place to support electronic data and operational standards to provide security for such data, as appropriate. (iii) Experience with, and expertise on, the development of device safety and effectiveness research and surveillance using electronic health data. (iv) Other expertise which the Secretary determines necessary to fulfill the activities under this subsection. (4) Review of contract in the event of a merger or acquisition The Secretary shall review a contract with a qualified entity under this subsection in the event of a merger or acquisition of the entity in order to ensure that the requirements under this subsection will continue to be met. (5) Report to Congress Not later than 18 months after the date of enactment of this subsection, and annually thereafter, the Secretary shall submit to the Committee on Health, Education, Labor, and Pensions of the Senate and the Committee on Energy and Commerce of the House of Representatives a report containing a description of the pilot projects being conducted pursuant to this subsection, including for each pilot project— (A) how the project is being implemented in accordance with paragraph (3) and the contractor or grantee as applicable