; (B) maintain a data access portal to enable such entities to submit such data to the Division; and (C) maintain and use such data, consistent with applicable privacy and confidentiality law, including— (i) the Federal Information Security Management Act of 2002 ( 6 U.S.C. 511 et seq. ); (ii) the Risk Management Framework and Artificial Intelligence Risk Management Framework of the National Institute of Standards and Technology; (iii) HIPAA privacy and security law (as defined in section 3009(a)(2) of the Public Health Service Act ( 42 U.S.C. 300jj–19(a)(2) )); and (iv) the Blueprint for an AI Bill of Rights of the White House Office of Science Technology Policy. (5) Analyzing data The Director of the Patient Safety Event Research and Development Division shall— (A) aggregate and analyze the patient-level data collected in accordance with this section to anticipate and identify patient safety events, including the precursors to and outcomes of patient safety events; and (B) analyze such patient-level data by race, ethnicity, gender, facility, age, social factors, and location to identify disparities in patient safety events. (6) Monitoring The Director of the Patient Safety Research and Development Division shall— (A) submit to the Health Care Safety Team bimonthly briefs on patient safety event surveillance