; (ii) providing multiomic data obtained via biotechnology equipment or services to the government of a foreign adversary; or (iii) obtaining human multiomic data via biotechnology equipment or services without expressed and informed consent. (2) Updates The Federal entity shall periodically, but not less than annually, review and, as appropriate, modify the list of biotechnology companies of concern. (g) Evaluation of certain biotechnology entities Not later than 180 days after the date of the enactment of this Act, the Federal entity shall determine whether BGI, MGI, Complete Genomics, and any subsidiary, affiliate, or successor of such entities, are biotechnology companies of concern. If any such entities, subsidiaries, affiliates, or successors are identified as biotechnology companies of concern, no Executive agency shall directly procure or obtain any biotechnology equipment or services from such entities, subsidiaries, affiliates, or successors. The Director of the Office of Management and Budget shall issue such policy, and the Federal Acquisition Regulatory Council shall promulgate such regulations, as may be necessary to effectuate this prohibition. (h) Analysis, assessment, and strategy Not later than 180 days after developing the list of entities under subsection (f)(1) and the determination of entities under subsection (g), the Federal entity, to the greatest extent practicable, leveraging relevant previous analyses and assessments, shall— (1) conduct an analysis of the list of entities identified under subsections (f)(1) and (g), including— (A) active Federal grants to or contracts with private companies, academic institutions, and public sector entities, including— (i) the number and type of covered biotechnology equipment or services already or expected to be procured; (ii) the anticipated lifespan of covered biotechnology equipment or services already or expected to be procured; (iii) the estimated costs and timeline to replace covered biotechnology equipment or services already procured