; (E) entities that are exporting dual-use spyware technology to any of the governments referred to in subparagraph (A); (F) entities that are buying and selling personally identifiable information that can be used to track and surveil potential victims; and (G) entities that are exporting items on the Commerce Control List (as set forth in Supplement No. 1 to part 774 of the Export Administration Regulations under subchapter C of chapter VII of title 15, Code of Federal Regulations) to any governments referred to in subparagraph (a) that can be misused for human rights abuses; (2) an assessment of how data that is purchased by governments most often perpetrating transnational repression is utilized; and (3) a description of any actions taken by the United States Government to address transnational repression under existing law, including— (A) section 212(a)(3)(C) of the Immigration and Nationality Act ( 8 U.S.C. 1182(a)(3)(C) ); (B) section 1263 of the Global Magnitsky Human Rights Accountability Act ( 22 U.S.C. 2656 note); (C) the interim final rule issued by the Bureau of Industry and Security of the Department of Commerce relating to Information Security Controls: Cybersecurity Items (86 Fed. Reg. 58205; October 21, 2021; 87 Fed. Reg. 1670, effective March 7, 2022); (D) section 7031(c) of the Department of State, Foreign Operations, and Related Programs Appropriations Act, 2020 (division G of Public Law 116–94 ; 8 U.S.C. 1182 note); (E) prosecutions and the statutory authority authorizing such prosecutions; (F) establishing specific bureaucratic structures focused on transnational repression; (G) which agencies are conducting outreach to victims of transnational repression and the form of such outreach; (H) the challenges of intelligence agencies in identifying transnational repression threats and perpetrators