; and (ii) may seek to reduce errors and waste in other executive agency programs and operations. (4) Privacy protections Any nongovernmental entity that, in the course of recovery auditing or recovery activity under this subsection, obtains information that identifies an individual or with respect to which there is a reasonable basis to believe that the information can be used to identify an individual, may not disclose the information for any purpose other than the recovery auditing or recovery activity and governmental oversight of the activity, unless disclosure for that other purpose is authorized by the individual to the executive agency that contracted for the performance of the recovery auditing or recovery activity. (5) Rule of construction Except as provided under paragraph (4), nothing in this subsection shall be construed as terminating or in any way limiting authorities that are otherwise available to executive agencies under existing provisions of law to recover improper payments and use recovered amounts. 3353. Compliance (a) Annual compliance report by Inspectors General of executive agencies (1) In general Each fiscal year, the Inspector General of each executive agency shall— (A) determine whether the executive agency is in compliance; and (B) submit a report on the determination made under subparagraph (A) to— (i) the head of the executive agency; (ii) the Committee on Homeland Security and Governmental Affairs of the Senate; (iii) the Committee on Oversight and Governmental Reform of the House of Representatives