; and (ii) less intrusive measures are not reasonably available to manage the risk. ; (4) by amending subsection (c) to read as follows: (c) Notification to covered person or entity (1) Advance notice Contracting activities shall notify covered persons and entities through covered solicitations and contracts, grants, or cooperative agreements of the following matters: (A) The program established under subsection (a). (B) The authorities established under subsection (b). (C) The responsibilities of covered persons or entities to exercise due diligence to mitigate their engagement in covered activities. (2) Notice of covered procurement actions (A) In general Upon exercising a covered procurement action, the head of a contracting activity shall notify the covered person or entity of the action. The covered person or entity shall be permitted the opportunity to challenge the covered procurement action by requesting an administrative review of the action under the procedures of the Department of Defense not later than 30 days after receipt of notice of the action. (B) Limitation on disclosure of information Full disclosure of information to a covered person or entity justifying an identification made under subsection (b)(1) or a covered procurement action need not be provided when such a disclosure would compromise national security or would pose an unacceptable threat to personnel of the United States or partners and allies. (C) Protection of classified information Classified information relied upon to exercise a covered procurement action may not be disclosed to a covered person or entity, or to their representatives, unless a protective order issued by a court of competent jurisdiction established under article I or article III of the Constitution of the United States specifically addresses the conditions under which such classified information may be disclosed.