; (2) establish the response protocol described in subsection (c); (3) establish the database described in subsection (d); and (4) include in any directory (other than the database described in paragraph (3)) containing provider directory information with respect to such plan the information described in subsection (e). (b) Verification process The verification process described in this subsection is, with respect to a group health plan, a process— (1) under which such plan verifies and updates the provider directory information included on the database described in subsection (d) of such plan of— (A) not less frequently than once every 90 days, a random sample of at least 10 percent of health care providers and health care facilities included in such database; and (B) any such provider or such facility included in such database that has not submitted any claim to such plan during a 12-month period; (2) that establishes a procedure for the removal from such database of such a provider or facility with respect to which such plan has been unable to verify such information during a period specified by the plan; and (3) that provides for the update of such database within 2 business days of such plan receiving from such a provider or facility information pursuant to section 1150C of the Social Security Act. (c) Response protocol The response protocol described in this subsection is, in the case of an individual enrolled under a group health plan who requests information through a telephone call or email on whether a health care provider or health care facility has a contractual relationship to furnish items and services under such plan, a protocol under which such plan— (1) responds to such individual as soon as practicable, and in no case later than 1 business day after such call or email is received, through a written electronic communication