; (B) the privacy and security of the information reported to the entity; and (C) the costs incurred by such entity in performing such duties. (2) Reports Not later than 2 years after the effective date of the first contract entered into under section 2795(a) of the Public Health Service Act, as added by subsection (a), and again not later than 4 years after such effective date, the Comptroller General of the United States shall submit to Congress a report containing the results of the study conducted under paragraph (1), together with recommendations for such legislation and administrative action as the Comptroller General determines appropriate. 324. Protecting patients and improving the accuracy of provider directory information (a) In general Subpart II of part A of title XXVII of the Public Health Service Act ( 42 U.S.C. 300gg–11 et seq.), as amended by the preceding sections, is further amended by adding at the end the following: 2729C. Protecting patients and improving the accuracy of provider directory information (a) Network status of providers (1) In general Beginning on the date that is one year after the date of enactment of this section, a group health plan or a health insurance issuer offering group or individual health insurance coverage shall— (A) establish business processes to ensure that all enrollees in such plan or coverage receive proof of a health care provider’s network status, based on what a plan or issuer knows or could reasonably know— (i) through a written electronic communication from the plan or issuer to the enrollee, as soon as practicable and not later than 1 business day after a telephone inquiry is made by such enrollee for such information; (ii) through an oral confirmation, documented by such issuer or coverage, and kept in the enrollee’s file for a minimum of 2 years; and (iii) in real-time through an online health care provider directory search tool maintained by the plan or issuer