; (ii) meet the definition of a qualified anti-terrorism technology under section 865 of the Homeland Security Act of 2002 ( 6 U.S.C. 444 ); or (iii) are determined by the Administrator to provide a risk assessment that is as effective as a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation with respect to identifying individuals who are not qualified to participate in the PreCheck Program due to disqualifying criminal history; and (B) with regard to private sector risk assessments, the Secretary has certified that reasonable procedures are in place with regard to the accuracy, relevancy, and proper utilization of information employed in such risk assessments. (d) Additional capability requirements At least 1 agreement under subsection (b) shall include the following capabilities: (1) Start-to-finish secure online or mobile enrollment capability. (2) Vetting of an applicant by means of biometrics if the collection— (A) is comparable with the appropriate and applicable standards developed by the National Institute of Standards and Technology; and (B) protects privacy and data security, including that any personally identifiable information is collected, retained, used, and shared in a manner consistent with section 552a of title 5, United States Code (commonly known as Privacy Act of 1974 ), and with agency regulations. (e) Target enrollment Subject to subsections (b), (c), and (d), the Administrator shall take actions to expand the total number of individuals enrolled in the PreCheck Program as follows: (1) 7,000,000 passengers before October 1, 2018. (2) 10,000,000 passengers before October 1, 2019. (3) 15,000,000 passengers before October 1, 2020. (f) Marketing of PreCheck Program Not later than 90 days after the date of enactment of the TSA Modernization Act , the Administrator shall— (1) enter into at least 2 agreements, using other transaction authority under section 114(m) of this title, to market the PreCheck Program