; and (B) include provisions that require the use of data protections for user privacy. (3) Consultation In carrying out the program, the Secretary shall consult with at least 1 organization that supports the development of intelligent transportation systems in the public and private sectors. (d) Data privacy and accuracy In carrying out the program, the Secretary shall ensure— (1) the protection of privacy for all sources of data utilized in the program by— (A) preventing reidentification of user data; (B) precluding the collection of biometric or automatic license plate reader data; and (C) preventing data utilized in the program from being used by any government entity for any purpose other than the purposes described in subsection (b); and (2) the accuracy of data utilized in the program by preventing— (A) hacking, spoofing, and disruption of connected and automated transportation systems; and (B) the incorporation of inaccurate data, including data generated by artificial intelligence. (e) Program locations In carrying out the program, the Secretary shall enter into agreements with public and private sector entities serving a variety of areas, including urban, suburban, rural, tribal, or any other appropriate settings. (f) Best practices Not later than 3 years after date of enactment of this Act, the Secretary shall publicly make available best practices to leverage private user data to support improved transportation management capabilities and efficiency, including— (1) legal considerations when acquiring private user data for public purposes; and (2) protecting privacy and security of individual user data. (g) Report The Secretary shall submit an annual report to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Environment and Public Works of the Senate detailing— (1) a description of the activities carried out under the program; (2) an evaluation of the effectiveness of the program in meeting the purposes described in subsection (b)