; and (III) use and disclose protected health information to facilitate clinical trial recruitment, except that in the case the covered entity provides a consumer-facing portal or website that informs individuals of clinical trials conducted by the covered entity, the covered entity shall secure opt-in consent from the individual, or the individual’s personal representative, prior to contacting an individual regarding such clinical trials unless such covered entity already has a relationship with the individual. (C) Clarification Nothing in this paragraph shall expand the authority of a health care clearinghouse or any other covered entity to use or disclose protected health information for marketing purposes under sections 164.501 and 164.508(a)(3) of title 45, Code of Federal Regulations. (c) Authorities relating to data processing (1) In general In carrying out HIPAA-related provisions, the Secretary shall permit a health care clearinghouse to aggregate protected health information, within the clearinghouse and among other clearinghouses, that the clearinghouse possesses in order to carry out the functions described in subsection (b)(3). Subject to section 164.502(a)(5)(i) of title 45, Code of Federal Regulations, a health care clearinghouse may carry out the functions described in subsection (b)(3) without obtaining individual authorization under section 164.508 of title 45, Code of Federal Regulations. (2) Privacy For purposes of clauses (ii) through (iv) of subsection (b)(3)(B), with respect to any report, analysis, or presentation provided by the covered entity to a third party, such report, analysis, or presentation— (A) shall include only de-identified data; or (B) shall include, subject to a qualifying data use agreement (as defined in subsection (j)), protected health information. (3) Clarification