; and (C) assessing and documenting the current and potential future or downstream positive and negative impacts of such system or process on the privacy, safety, or security of consumers and their identifying information. (4) Perform ongoing testing and evaluation of the current and historical performance of the automated decision system or augmented critical decision process using measures such as benchmarking datasets, representative examples from the covered entity’s historical data, and other standards, including by documenting— (A) a description of what is deemed successful performance and the methods and technical and business metrics used by the covered entity to assess performance; (B) a review of the performance of such system or process under test conditions or an explanation of why such performance testing was not conducted; (C) a review of the performance of such system or process under deployed conditions or an explanation of why performance was not reviewed under deployed conditions; (D) a comparison of the performance of such system or process under deployed conditions to test conditions or an explanation of why such a comparison was not possible; (E) an evaluation of any differential performance associated with consumers' race, color, sex, gender, age, disability, religion, family status, socioeconomic status, or veteran status, and any other characteristics the Commission deems appropriate (including any combination of such characteristics) for which the covered entity has information, including a description of the methodology for such evaluation and information about and documentation of the methods used to identify such characteristics in the data (such as through the use of proxy data, including ZIP Codes)