; and (4) document the details of the arrest and the cause for such arrest. . 403. Biometric enterprise management (a) Biometrics and identity management development and strategy Not later than one year after the date of the enactment of this Act, the Under Secretary for Strategy, Policy, and Plans shall, in coordination with the Privacy Officer and Civil Rights and Civil Liberties Officer, and consultation with appropriate heads of components or offices within the Department, develop and coordinate a biometrics and identity management enterprise strategy for the Department that includes guidance and requirements regarding the front-end collection, use, retention, sharing, and disposal of biometric information by and within the Department and requires the establishment of robust privacy protections for individuals that, with respect to the United States VISIT program and any other such passenger facilitation program, prioritizes securing voluntary consent for the capture of biometrics from individuals through an opt-in approach rather than an opt-out approach. Upon the issuance of the strategy, no component head shall be authorized to initiate or expand a pilot or program that includes biometrics or identity management without the Secretary determining that the program is consistent with this strategy or successor strategy. (b) Compliance with department biometrics and identity management strategy The Under Secretary for Management shall— (1) not later than 180 days after the issuance of the biometrics and identity management enterprise strategy required under subsection (a) of this section, issue determinations regarding compliance with the strategy for each pilot or program of the Department that uses biometric technologies or information and, where necessary, a corresponding corrective action plan for the pilot or program to come into compliance with the strategy within a year