; and (B) not later than 30 days after the date on which the Administrator makes a determination under subparagraph (A)— (i) provide notice to individuals and small business concerns affected by the cybersecurity risk or incident; and (ii) submit to the appropriate congressional committees a report, based on information available to the Administrator as of the date which the Administrator submits the report, that includes— (I) a summary of information about the cybersecurity risk or incident, including how the cybersecurity risk or incident occurred; and (II) an estimate of the number of individuals and small business concerns affected by the cybersecurity risk or incident, including an assessment of the risk of harm to affected individuals and small business concerns. (3) Rule of construction Nothing in this subsection shall be construed to affect the reporting requirements of the Administrator under chapter 35 of title 44, United States Code, in particular the requirement to notify the Federal information security incident center under section 3554(b)(7)(C)(ii) of such title, or any other provision of law. (4) Definitions In this subsection: (A) Appropriate congressional committees The term appropriate congressional committees means— (i) the Committee on Small Business and Entrepreneurship of the Senate; and (ii) the Committee on Small Business of the House of Representatives. (B) Cybersecurity risk; incident The terms cybersecurity risk and incident have the meanings given such terms, respectively, under section 2209(a) of the Homeland Security Act of 2002. .