to such health care claims database to staff with appropriate training, clearance, and background checks, and require such staff to undergo regular privacy and security training. (F) Maintain effective security standards for transferring data from such health care claims database and making such data available to all individuals and entities who are authorized users pursuant to subsection (c)(2). (G) Adhere to best security practices with respect to the management and use of such data for health services research, in accordance with applicable Federal privacy law. (H) Report on the security methods of the entity to— (i) the Secretary