; (3) comply with privacy protections provided under the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note); and (4) be limited in use for the purpose of public health and be protected from all other internal use by any entity that collects, stores, or receives the data, including use of the data in determinations of eligibility (or continued eligibility) in health plans, and from any other inappropriate uses. (d) Authorization of appropriations There is authorized to be appropriated to relevant medical and public officials such sums as are necessary to procure and administer the COVID–19 diagnostic tests and provide the medical care required in this section. 4. Covid–19 data collection at correctional facilities (a) Data collection During the period beginning not later than 45 days after the date of enactment of this Act and ending on the last day of the COVID–19 pandemic, each correctional facility shall submit weekly reports to the Department of Justice and the Centers for Disease Control and Prevention, and the public health authority of the State in which the facility is located on the following: (1) Testing numbers COVID–19 diagnostic testing, including cumulative and new (since the previous report) counts of— (A) the number of incarcerated persons tested for COVID–19, disaggregated by routine weekly testing, symptomatic testing, close contact testing, recovery monitoring testing, and new entrant testing; (B) the number of correctional facility employees tested for COVID–19, disaggregated by routine weekly testing, symptomatic testing, close contact testing, and recovery monitoring testing