; 42 U.S.C. 1320d–2 note), any disclosure of patient-specific information by the Secretary under subparagraph (A) shall be treated as a permitted disclosure. (C) The Secretary shall include in the procedures established under subparagraph (A) appropriate safeguards, as determined by the Secretary, concerning the cybersecurity of information systems of the Department of Defense systems and the operational security of personnel of the Department. (4) In this subsection, the term controlled substance has the meaning given that term in section 102 of the Controlled Substances Act ( 21 U.S.C. 802 ). . (b) Briefing Not later than one year after the date of the enactment of this Act, the Secretary of Defense shall provide to the Committees on Armed Services of the House of Representatives and the Senate a briefing on the implementation of the program established under section 1074g(g) of title 10, United States Code, as added by subsection (a). (c) Conforming amendments (1) Title 10, United States Code Section 1079(q) of title 10, United States Code, is amended by striking section 1074g(g) and inserting section 1074g(h) . (2) FY16 NDAA Section 715(e)(2) of the National Defense Authorization Act for Fiscal Year 2016 ( Public Law 114–92 ; 10 U.S.C. 1074g note) is amended by striking section 1074g(g) and inserting section 1074g(h) . (3) FY17 NDAA Section 745(b) of the National Defense Authorization Act for Fiscal Year 2017 ( Public Law 114–328 ; 10 U.S.C. 1074 note) is amended by striking section 1074g(g) and inserting section 1074g(h) .