; and (ii) that person shall be liable for any export, reexport, or in-country transfer in violation of this section. (F) Considerations In establishing a threshold under subparagraph (A), the Secretary, in coordination with the heads of the appropriate Federal agencies, shall seek to balance the need to protect personal data from exploitation by foreign governments and foreign adversaries against the likelihood of— (i) impacting legitimate business activities, research activities, and other activities that do not harm the national security of the United States; or (ii) chilling speech protected by the First Amendment to the Constitution of the United States. (4) Determination of period for protection The Secretary, in coordination with the heads of the appropriate Federal agencies, shall determine, for each category (or combination of categories) of personal data identified under paragraph (1), the period of time for which encryption technology described in subsection (b)(4)(A)(iii) is required to be able to protect that category (or combination of categories) of data from decryption to prevent the exploitation of the data by a foreign government or foreign adversary from harming the national security of the United States. (5) Use of information; considerations In carrying out this subsection (including with respect to the list required under paragraph (2)), the Secretary, in coordination with the heads of the appropriate Federal agencies, shall— (A) use multiple sources of information, including— (i) publicly available information; (ii) classified information, including relevant information provided by the Director of National Intelligence; (iii) information relating to reviews and investigations of transactions by the Committee on Foreign Investment in the United States under section 721 of the Defense Production Act of 1950 ( 50 U.S.C. 4565 )