; and (2) any data obtained or derived from TikTok application or Musical.ly application users in the United States. (b) Deadline (1) In general Subject to paragraph (2), ByteDance shall complete the divestment of assets required under subsection (a) before the end of the 90-day period beginning on the date of enactment of this Act. (2) Extensions CFIUS may provide one or more 30-day extensions with respect to the deadline described under paragraph (1), but under no circumstances may such extensions extend the deadline beyond the end of the 12-month period beginning on the date of enactment of this Act. (3) Progress report Not later than the end of the 45-day period beginning on the date of enactment of this Act, ByteDance shall provide evidence to the President that ByteDance is in the process of divesting itself of all assets described under subsection (a). (c) Certifications and audits (1) Weekly certification Until ByteDance provides the certification under paragraph (2)(A), ByteDance and TikTok shall certify to CFIUS on a weekly basis that they are in compliance with this Act and ByteDance shall include a description of efforts to make divestment required under this section and a timeline for projected completion of remaining actions necessary to complete such divestment. (2) Data destruction certification and audit After the deadline described under subsection (b)(1)— (A) ByteDance shall certify in writing to CFIUS that ByteDance has destroyed all data that ByteDance is required to divest pursuant to this section, including all copies of such data wherever located; and (B) CFIUS may audit ByteDance, on such terms as CFIUS determines appropriate, in order to ensure that such destruction of data is complete. (d) Limitation on divestments (1) In general In carrying out a divestment required under this section, ByteDance may not complete a sale or transfer to any third party— (A) until ByteDance notifies CFIUS in writing of the intended recipient or buyer