; (3) evaluate and provide input with respect to addressing cybersecurity risks and security concerns related to consumer devices, services, applications, and software; (4) evaluate and provide input with respect to the privacy concerns and protection standards related to consumer and employee health data; (5) review and advise on the need, if any, to update the report issued by the Department of Health and Human Services to Congress entitled Examining Oversight of the Privacy & Security of Health Data Collected by Entities Not Regulated by HIPAA