The act mandates evaluations of cybersecurity vulnerabilities and privacy risks, along with the development of safeguards to ...