; (vi) protections against physical intrusions and natural disasters; (vii) information security protections required by subchapter II of chapter 35 of title 44, United States Code, and other applicable law and policy; and (viii) any other requirements the Administrator determines appropriate. (B) Consultation In establishing the requirements described in subparagraph (A)(vii), the Administrator shall consult with the Director of the Cybersecurity and Infrastructure Security Agency and the National Cyber Director. (3) Incorporation of minimum requirements into current data centers As soon as practicable, and in any case not later than 90 days after the Administrator establishes the minimum requirements pursuant to paragraph (1), the Administrator shall issue guidance to ensure, as appropriate, that covered agencies incorporate the minimum requirements established under that paragraph into the operations of any data center of a covered agency existing as of the date of enactment of the Federal Data Center Enhancement Act of 2023 . (4) Review of requirements The Administrator, in consultation with the Administrator of General Services and the Federal Chief Information Officers Council, shall review, update, and modify the minimum requirements established under paragraph (1), as necessary. (5) Report on new data centers During the development and planning lifecycle of a new data center, if the head of a covered agency determines that the covered agency is likely to make a management or financial decision relating to any data center, the head of the covered agency shall— (A) notify— (i) the Administrator; (ii) Committee on Homeland Security and Governmental Affairs of the Senate ; and (iii) Committee on Oversight and Accountability of the House of Representatives