; (B) to implement substantial security measures to protect the system from unauthorized access; (C) to adopt policies establishing effective oversight of the use and operation of the system; and (D) to ensure that there are no specific privacy concerns with the technological architecture of the system. (i) Innovative screening approaches and technologies (1) In general The Administrator shall encourage qualified registered traveler services providers to recommend to the Administrator innovative identity verification and screening approaches and technologies. (2) Response Upon the receipt of any recommendations from a qualified registered traveler services provider under paragraph (1), the Administrator shall— (A) review and respond in writing to the qualified registered traveler services provider within 30 days; (B) if appropriate, test or conduct a pilot project with respect to such approaches and technologies