; or (ii) advertise any product or service. (B) No waiver In the offering of a method described in paragraph (5)(D), a consumer reporting agency shall not require a consumer to waive any rights nor indemnify the consumer reporting agency from any liabilities arising from the offering of such method. (7) Reports (A) CFPB (i) Recommendation Not later than 180 days after the date of enactment of the Control Your Personal Credit Information Act of 2018 , the Director of the Bureau shall, after consultation with the Federal Deposit Insurance Corporation, the National Credit Union Administration, and other Federal and State regulators as the Director of the Bureau determines are appropriate, submit to the Committee on Banking, Housing, and Urban Affairs of the Senate and the Committee on Financial Services of the House of Representatives recommendations on how to provide consumers greater transparency and personal control over their consumer reports furnished for permissible purposes under subsections (a)(3)(E) and (a)(6). (ii) Report The Director of the Bureau shall submit to the Committee on Banking, Housing, and Urban Affairs of the Senate and the Committee on Financial Services of the House of Representatives an annual report that includes recommendations on how this subsection may be improved, a description of enforcement actions taken to demonstrate compliance with this subsection, recommendations on how to improve oversight of consumer reporting agencies and users of consumer reports, and any other recommendations concerning how consumers may be provided greater transparency and control over their personal information. (B) GAO (i) Study The Comptroller General of the United States shall conduct a study on what additional protections or restrictions may be needed to ensure that the information collected in consumer files is secure and does not adversely impact consumers. (ii) Report Not later than 1 year after the date of enactment of the Control Your Personal Credit Information Act of 2018 , the Comptroller