; (iii) information relating to reviews and investigations of transactions by the Committee on Foreign Investment in the United States under section 721 of the Defense Production Act of 1950 ( 50 U.S.C. 4565 ); (iv) the categories of sensitive personal data described in paragraphs (1)(ii) and (2) of section 800.241(a) of title 31, Code of Federal Regulations, as in effect on the day before the date of the enactment of the Protecting Americans' Data From Foreign Surveillance Act of 2023 , and any categories of sensitive personal data added to such section after such date of enactment; (v) information provided by the advisory committee established pursuant to paragraph (7); and (vi) the recommendations (which the Secretary shall request) of— (I) experts in privacy, civil rights, and civil liberties, identified by the National Academy of Sciences; and (II) experts on the First Amendment to the Constitution of the United States identified by the American Bar Association; and (B) take into account— (i) the significant quantity of personal data of covered individuals that is publicly available by law or has already been stolen or acquired by foreign governments or foreign adversaries; (ii) the harm to United States national security caused by the theft or acquisition of that personal data; (iii) the potential for further harm to United States national security if that personal data were combined with additional sources of personal data; (iv) the fact that non-sensitive personal data, when analyzed in the aggregate, can reveal sensitive personal data; (v) the commercial availability of inferred and derived data