; and (ii) assessing and mitigating privacy risks to help organizations protect individuals’ privacy in information systems and networks; (B) establish common definitions and characterizations for aspects of privacy risk management; (C) provide case studies and risk profiles of framework implementation; (D) provide guidance to enable organizations to use the framework to meet privacy requirements from Federal, State, local, and Tribal governments and international policymakers; (E) incorporate voluntary, consensus-based technical standards and best practices; (F) facilitate use by regulators and markets with the aim of reducing barriers to trade; and (G) not prescribe or otherwise require the use of specific information or communications technology products or services; (2) carry out research associated with mitigating privacy risks associated with information systems and networks, including to inform periodic updates to the privacy risk management framework developed pursuant to paragraph (1); (3) in consultation with the Director of the Digital Privacy Agency, the Federal Trade Commission, and other related sector-specific risk management agencies, support the development of guidance and risk profiles to help organizations utilize the privacy risk management framework developed pursuant to paragraph (1), to the extent practicable, to adopt privacy requirements and regulations established by the Federal Government, States, and international policymakers; (4) support activities to improve the efficacy and applicability of privacy-preserving computing, de-identification techniques and processes, and other technological means of mitigating individuals’ privacy risks by enhancing predictability, manageability, disassociability, and confidentiality; (5) support and strategically engage in the development of voluntary, consensus-based technical standards for privacy-enhanced systems and networks, including international technical standards, through open, transparent, and consensus-based processes