; (B) access to such information is limited to staff with appropriate security and privacy training; (C) effective security standards for transferring such data or making such data available to authorized uses of such database are maintained; (D) a process for providing access to such data for such users is secure and maintains the confidentiality of any individually identifiable health information is established; (E) such database adheres to best security practices relating to the management and use of such data, consistent with any applicable Federal law