to such qualified prescription drug monitoring program for the medical director or pharmacy director of any managed care entity (as defined under section 1932(a)(1)(B)) that has a contract with the State under section 1903(m) or under section 1905(t)(3), or the medical director or pharmacy director of any entity has a contract to manage the pharmaceutical benefit with respect to individuals enrolled in the State plan (or waiver of the State plan). All applicable State and Federal security and privacy laws shall apply to the directors or designees of such directors of any State Medicaid program or entity accessing a qualified prescription drug monitoring program under this section. (c) Application of privacy rules clarification The Secretary shall clarify privacy requirements, including requirements under the regulations promulgated pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note), related to the sharing of data under subsection (b) in the same manner as the Secretary is required under subparagraph (J) of section 1860D–4(c)(5) to clarify privacy requirements related to the sharing of data described in such subparagraph. (d) Ensuring access In order to ensure reasonable access to health care, the Secretary shall waive the application of the requirement under subsection (a), with respect to a State, in the case of natural disasters and similar situations, and in the case of the provision of emergency services (as defined for purposes of section 1860D–4(c)(5)(D)(ii)(II)). (e) Reports (1) State reports Each State shall include in the annual report submitted to the Secretary under section 1927(g)(3)(D), beginning with such reports submitted for 2023, information including, at a minimum, the following information for the most recent 12-month period: (A) The percentage of covered providers (as determined pursuant to a process established by the State) who checked the prescription drug history of a covered individual through a qualified prescription