; and (II) entities, including institutions of higher education, reporting to the data system; (ii) take into consideration, to the extent practicable— (I) the guidelines outlined in the U.S. Web Design Standards maintained by the General Services Administration and the Digital Services Playbook and TechFAR Handbook for Procuring Digital Services Using Agile Processes of the U.S. Digital Service; and (II) the relevant successor documents or recommendations of such guidelines; (iii) use modern, relevant privacy- and security-enhancing technology, and enhance and update the data system as necessary to carry out the purpose of this subsection; (iv) ensure data privacy and security is consistent with any relevant Federal law relating to privacy or data security, including— (I) the requirements of subchapter II of chapter 35 of title 44, United States Code, specifying security categorization under the Federal Information Processing Standards or any relevant successor of such standards; (II) security requirements that are consistent with the Federal agency responsibilities in section 3554 of title 44, United States Code, or any relevant successor of such responsibilities; and (III) security requirements, guidelines, and controls consistent with cybersecurity standards and best practices developed by the National Institute of Standards and Technology, including frameworks, consistent with section 2(c) of the National Institute of Standards and Technology Act ( 15 U.S.C. 272(c) ), or any relevant successor of such frameworks; (v) follow Federal data minimization practices to ensure only the minimum amount of data is collected to meet the system’s goals, in accordance with Federal data minimization standards and guidelines developed by the National Institute of Standards and Technology