; (ii) allows access to such information by the person to whom the personally identifiable information pertains and provides an opportunity to correct inaccuracies; (iii) prevents such information, which is collected for one purpose, from being used for another purpose; and (iv) provides security for such information, including the provision of written notice to any individual, within 14 days of the date of compromise, whose privacy interests are compromised by the unauthorized release of personally identifiable information as a result of a breach of security at or by the agency. (B) A description of any significant alternatives to the proposed rule which accomplish the stated objectives of applicable statutes and which minimize any significant privacy impact of the proposed rule on individuals. (b) Final privacy impact assessment (1) In general Whenever an agency promulgates a final rule under section 553 of this title, after being required by that section or any other law to publish a general notice of proposed rulemaking, or promulgates a final interpretative rule involving the internal revenue laws of the United States, and such rule or proposed rulemaking pertains to the collection, maintenance, use, or disclosure of personally identifiable information from ten or more individuals, other than agencies, instrumentalities, or employees of the Federal Government, the agency shall prepare a final privacy impact assessment, signed by the senior agency official with primary responsibility for privacy policy. (2) Contents Each final privacy impact assessment required under this subsection shall contain the following: (A) A description and analysis of the extent to which the final rule will impact the privacy interests of individuals, including the extent to which such rule— (i) provides notice of the collection of personally identifiable information, and specifies what personally identifiable information is to be collected and how it is to be collected, maintained, used, and disclosed