; or (D) setting forth the period of time for which encryption technology described in subsection (b)(4)(A)(iii) is required under paragraph (4) to be able to protect such a category of data from decryption. (7) Advisory committee (A) In general The Secretary shall establish an advisory committee to advise the Secretary with respect to privacy and sensitive personal data. (B) Membership The committee established pursuant to subparagraph (A) shall include the following members selected by the Secretary: (i) Experts on privacy and cybersecurity. (ii) Representatives of United States private sector companies, industry associations, and scholarly societies. (iii) Representatives of civil society groups, including such groups focused on protecting civil rights and civil liberties. (C) Applicability of Federal advisory committee Act Subsections (a)(1), (a)(3), and (b) of section 10 and sections 11, 13, and 14 of the Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to the advisory committee established pursuant to subparagraph (A). (8) Treatment of anonymized personal data (A) In general In carrying out this subsection, the Secretary may not treat anonymized personal data differently than identifiable personal data unless the Secretary is confident, based on the method of anonymization used and the period of time determined under paragraph (4) for protection of the category of personal data involved, it will not be possible for well-resourced adversaries, including foreign governments, to re-identify the individuals to which the anonymized personal data relates, such as by using other sources of data, including non-public data obtained through hacking and espionage, and reasonably anticipated advances in technology. (B) Guidance The Under Secretary of Commerce for Standards and Technology shall issue guidance to the public with respect to methods for anonymizing data and how to determine if individuals to which the anonymized personal data relates can be, or are likely in the future to be, reasonably