as a national provider identifier issued by the National Plan and Provider Enumeration System of the Centers for Medicare & Medicaid Services) of each covered provider who prescribed a controlled substance to the covered individual during at least the most recent 12-month period. (2) The program facilitates the integration of information described in paragraph (1) into the workflow of a covered provider, which may include the electronic system the covered provider uses to prescribe controlled substances. (3) The program has in place a data sharing agreement with the State Medicaid program that allows, at a minimum, the medical director and pharmacy director of such program (and any designee of such a director who reports directly to such director) to access the information described in paragraph (1) in an electronic format for purposes of improving health care outcomes of individuals enrolled in the State plan (or waiver of such plan) and monitoring and preventing fraud, waste, and abuse. (c) Application of privacy rules clarification The Secretary shall clarify privacy requirements, including requirements under the regulations promulgated pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note), related to the sharing of data under subsection (b) in the same manner as the Secretary is required under subparagraph (J) of section 1860D–4(c)(5) to clarify privacy requirements related to the sharing of data described in such subparagraph. (d) Ensuring access In order to ensure reasonable access to health care, the Secretary may waive the application of the requirement under subsection (a), with respect to a State, in the case of natural disasters and similar situations, and in the case of the provision of emergency services (as defined for purposes of section 1860D–4(c)(5)(D)(ii)(II)). (e) Reports (1) State reports Each State shall include in the annual report submitted to the Secretary under section 1927(g)(3)(D), beginning with such reports submitted