; (IV) a statement as to whether the data broker implements a credentialing process and, if so, a description of that process; (V) any additional information or explanation the data broker chooses to provide concerning its data collection practices; and (VI) any other information determined appropriate by the Commission. (B) Construction Nothing in this paragraph shall be construed as requiring a data broker to disclose any information that is a trade secret or other kind of confidential information described in section 552(b)(4) of title 5, United States Code. (2) Public availability (A) In general The Commission shall make the information provided pursuant to paragraph (1)(A)(ii) publicly available in a downloadable and machine-readable format, except in the event that the Commission— (i) determines that the risk of making such information available is not in the interest of public safety or welfare; and (ii) provides a justification for such determination. (B) Disclaimer The Commission shall include on the website of the Commission a disclaimer that— (i) the Commission cannot confirm the accuracy of the information provided pursuant to paragraph (1)(A)(ii); and (ii) individuals may contact a data broker who provided such information at their own risk. (b) Centralized data deletion system (1) Establishment (A) In general Not later than 1 year after the date of enactment of this section, the Commission shall promulgate regulations to establish a centralized system that— (i) implements and maintains reasonable security procedures and practices (including administrative, physical, and technical safeguards) appropriate to the nature of the information and the purposes for which the personal information will be used, to protect individuals’ personal information from unauthorized use, disclosure, access, destruction, or modification