; (B) limits such uses and disclosures to the original purpose of disclosure under subsection (b)(3)(B); and (C) provides that the data recipient will— (i) not use or further disclose the information other than as permitted by the qualifying data use agreement or as otherwise required by law; (ii) use appropriate safeguards to prevent use or disclosure of the information other than as provided for by the qualifying data use agreement; and (iii) ensure that any agents to whom it provides the data agree to the same restrictions and conditions that apply to the data recipient with respect to such information. . (b) Regulations Not later than 180 days after the date of the enactment of this Act, the Secretary of Health and Human Services shall promulgate regulations to carry out the amendment made by subsection (a). (c) Conforming amendment Section 1171(2) of the Social Security Act ( 42 U.S.C. 1320d(2) ) is amended by inserting before the period the following: or receives a standard transaction from another entity and processes or facilitates the processing of health information into nonstandard format or nonstandard data content for the receiving entity. Such term also includes an entity that carries out such processing functions, transmits standard health care claims, transmits health care claim payments or provides advice on such, and transmits any standard transactions on behalf of a HIPAA-covered entity and in addition, engages in any authority of such entity described in subsection (b)(3) of section 13451 of the Health Information Technology for Economic and Clinical Health Act .