; (2) by redesignating subsections (b) and (c) as subsections (c) and (d), respectively; (3) by inserting after subsection (a) the following new subsection: (b) Requiring online ticket issuers To put in place site policies and establish safeguards To protect site security (1) Requirement to enforce site policies Each ticket issuer that owns or operates an internet website or online service that facilitates or executes the sale of event tickets shall ensure that such website or service has in place an access control system, security measure, or other technological control or measure to enforce posted event ticket purchasing limits. (2) Requirement to establish site security safeguards (A) In general Each ticket issuer that owns or operates an internet website or online service that facilitates or executes the sale of event tickets shall establish, implement, and maintain reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, integrity, or availability of the website or service. (B) Considerations In establishing the safeguards described in subparagraph (A), each ticket issuer described in such paragraph shall consider— (i) the administrative, technical, and physical safeguards that are appropriate to the size and complexity of the ticket issuer; (ii) the nature and scope of the activities of the ticket issuer; (iii) the sensitivity of any customer information at issue