; (B) monitor compliance by the applicable entity with this Act; (C) oversee— (i) in the case of an applicable entity that is a covered entity, each privacy impact assessment carried out under subsection (c); and (ii) the comprehensive privacy program implemented under subsection (d); and (D) act as a contact for the Commission, other Federal, State, and local authorities, and the applicable entity with respect to matters relating to the privacy and security of personal data. (c) Consideration of privacy implications of material changes in processing sensitive personal data (1) In general If an applicable entity that is a covered entity intends to begin a new collection or processing activity or to make a material change in its processing of sensitive personal data, the applicable entity shall, before beginning the new processing activity or making the material change, consider the privacy implications, if any of the change. (2) Considerations An applicable entity that is a covered entity shall ensure, in considering the privacy implications of a material change as required under paragraph (1), that the consideration is reasonable and appropriate with respect to the sensitive personal data that will be affected by the new processing activity or the material change in processing by considering— (A) the nature and volume of the sensitive personal data