; (2) compliance with the provisions of this Act and regulations promulgated under this Act; (3) violations of the provisions of this Act and regulations promulgated under this Act; (4) enforcement actions by the Commission and State attorneys general for violations of the provisions of this Act and regulations promulgated under this Act; (5) priorities of the Commission in enforcing the provisions of this Act and regulations promulgated under this Act; and (6) resources needed by the Commission to fully implement and enforce the provisions of this Act and regulations promulgated under this Act. (c) Study and report by the Government Accountability Office Not later than 3 years after the date of enactment of this Act, and once every 3 years thereafter, the Comptroller General of the United States shall submit to the President and Congress a report that surveys Federal data privacy and security laws in order to— (1) identify any inconsistency between the requirements under this Act and the requirements under any law related to the privacy and security of personal data; (2) review the impact of the provisions of this Act on small businesses and provide recommendations, if necessary, to improve compliance and enforcement; (3) provide recommendations on amending Federal data privacy and security laws in light of changing technological and economic trends; and (4) detail the Federal data privacy and security enforcement activities carried out by the Commission and other Federal agencies. 13. Severability If any provision of this Act or the application of such provision to any person or circumstance is held to be unconstitutional, the remainder of this Act, and the application of the provision to any other person or circumstance, shall not be affected. 14. Effective date This Act shall take effect on the date that is 1 year after the date of enactment of this Act, except that section 10 shall take effect upon the date of enactment of this Act.