; (B) review research applications for scientific merit; (C) ensure research applications identify proposed qualified researchers; (D) publish guidelines and criteria to be used by the NSF in determining how it will review research applications seeking approval to be a qualified research project; (E) identify, in consultation with the Commission, what data and information in a platform’s possession will be qualified data and information for the purposes of carrying out a qualified research project; (F) ensure that approved research applications do not request data described in section 2(6)(B); and (G) prescribe and publish guidelines and criteria, in consultation with the Commission, used to determine how the NSF and Commission will identify qualified data and information necessary to conduct a qualified research project; (2) provide that the Commission shall— (A) review research applications for privacy and cybersecurity risks; (B) for each qualified research project, establish appropriate privacy and cybersecurity safeguards that a platform must implement in the provision of, and with which qualified researchers must comply to access, qualified data and information that a platform is required to share with qualified researchers pursuant to a qualified research project, and such safeguards— (i) must account for the relative sensitivity of the qualified data and information involved and be sufficient to protect such data and information; and (ii) may include alternative protections, as appropriate and in consideration of the aims of the qualified research project, including— (I) encryption of the data in transit and when not in use; (II) delivery of the data in a format that employs methods to prevent qualified researchers from identifying individuals in the dataset; (III) data access logs; and (IV) keystroke logs