; (B) contracts with third parties for the collection of user data through the online service provided by the commercial data operator; and (C) any other item that the Commission determines, by rule, is necessary or useful for the protection of investors and in the public interest. (3) Valuation methodology (A) In general The Commission, in consultation with appropriate standards settings organizations, shall develop a method or methods for calculating the value of user data required to be disclosed under paragraph (2). (B) Considerations In developing the method under subparagraph (A), the Commission shall promote comparability in calculating the value of data across commercial data operators that utilize user data in a similar manner while taking into account the potential need to develop distinct methods for calculating the value of data for different uses, sectors, and business models. . (b) Qualitative disclosure Not later than 1 year after the date of enactment of this subsection, the Commission shall amend section 229.306 of title 17, Code of Federal Regulations, to require a commercial data operator that is an issuer subject to section 13 or 15(d) of the Securities Exchange Act of 1934 ( 15 U.S.C. 78m , 78o(d)) to provide quantitative and qualitative disclosures about the value of user data held, including— (1) technical and legal measures in place to protect user data held by the commercial data operator; (2) an assessment of financial and legal risks associated with storing the type and quantity of user data held by the commercial data operator; (3) each source of user data held by the commercial data operator, whether by sale, a direct consumer relationship, an indirect consumer relationship, or other means; (4) each discrete revenue generating operation of the commercial data operator and any subsidiary or affiliate that relies on user data