; and (2) in accordance with the privacy and cybersecurity safeguards prescribed by the Commission for the qualified research project. (b) Protection of personal information A qualified researcher that is provided access to qualified data and information for purposes of a qualified research project may not— (1) attempt to reidentify, disclose, publish, or use for commercial purpose personal information derived from such qualified data and information