; and (B) expertise in privacy or information security; (2) State attorneys general, State privacy regulators, and other State agencies that have expertise in privacy or information security; (3) international and intergovernmental bodies that conduct activities relating to the privacy or information security; (4) agencies of other countries that are similar to the Agency or have expertise in privacy or information security; (5) privacy and information security experts in academia, government, civil society, or industry; and (6) advisory boards of the Agency established under section 308, as appropriate. 303. Reporting and audit requirements (a) Reports required (1) In general Not later than 6 months after the date of the enactment of this Act, and every 6 months thereafter, the Director shall submit a report to the President and to the Committee on Energy and Commerce, the Committee on the Judiciary, and the Committee on Appropriations of the House of Representatives and the Committee on Commerce, Science, and Transportation, the Committee on the Judiciary, and the Committee on Appropriations of the Senate, and shall publish such report on the website of the Agency. (2) Contents Each report required by subsection (a) shall include— (A) a discussion of the significant problems faced by individuals with respect to the privacy or security of personal information; (B) a justification of the budget request of the Agency for the preceding year, unless a justification for such year was included in the preceding report submitted under such subsection; (C) a list of the significant rules and orders adopted by the Agency, as well as other significant initiatives conducted by the Agency, during the preceding 6-month period and the plan of the Agency for rules, orders, or other initiatives to be undertaken during the upcoming 6-month period