; and (G) meets such other requirements as may be specified by the Secretary. (2) Annual review of approval The Secretary shall, not less than annually and in consultation with staff with appropriate technical expertise, review each mobile health record application approved under paragraph (1) to determine whether such application continues to meet the requirements specified in such paragraph. The Secretary shall revoke the approval of any such application that fails to meet such requirements. (c) Information on Program The Secretary shall, through the public website of the Centers for Medicare & Medicaid Services, mailed notices, through a notice at the time of enrollment of an individual in part A or part B, public awareness campaigns, the notice described in section 1804(a), the provision of personalized prevention plan services (as defined in section 1861(hhh)), or otherwise (as determined appropriate by the Secretary), ensure that individuals described in subsection (a) receive information not less than twice each year regarding the Program, including a list of mobile health record applications approved under subsection (b)(1). (d) Cybersecurity and data privacy (1) Consultation In carrying out the Program, the Secretary shall consult with the National Coordinator for Health Information Technology and other Federal agencies determined appropriate by the Secretary to ensure the compliance of entities participating in the Program with all applicable provisions of the regulations promulgated by the Secretary under part C of title XI and section 264 of the Health Insurance Portability and Accountability Act of 1996. (2) Additional cybersecurity protections In carrying out the Program, the Secretary shall consult with appropriate Federal agencies, including the National Institute for Standards and Technology, and appropriate public-private partnerships (such as the Sector Coordinating Councils), including the Healthcare and Public Health Sector Coordinating Council, to ensure that relevant and applicable