; (4) maintain updated, clear, and understandable records of all data security practices undertaken by the covered entity; (5) serve as the point of contact between the covered entity and enforcement authorities; and (6) advocate for policies and practices within the covered entity that promote individual privacy. (b) Protections The privacy protection officer shall not be dismissed or otherwise penalized by the covered entity for performing any of the tasks assigned to the person under this section. 8. Research into privacy enhancing technology Section 4(a) of the Cyber Security Research and Development Act ( 15 U.S.C. 7403(a) ) is amended— (1) by striking the subsection heading and inserting the following: (a) Network security and information privacy research grants ; and (2) in paragraph (1), by striking subparagraph (D) and inserting the following: (D) privacy and confidentiality, including— (i) cryptography; (ii) anonymization; (iii) pseudonymization; (iv) filtering tools; (v) anti-spying and anti-tracking tools; and (vi) any other technology that the Director determines will enhance individual privacy