; and (B) such individual or entity agrees to not disclose publicly or to another individual or entity any information that identifies a particular practitioner or health care facility. (2) Specified data sharing individuals and entities For purposes of paragraph (1), the specified data sharing individuals and entities described in this paragraph are the following: (A) Oversight agencies Health oversight agencies (as defined in section 164.501 of title 45, Code of Federal Regulations), including the Centers for Medicare & Medicaid Services, the Office of the Inspector General of the Department of Health and Human Services, the Government Accountability Office, the Congressional Budget Office, the Medicare Payment Advisory Commission, and the Medicaid and CHIP Payment and Access Commission. (B) Researchers Individuals who conduct scientific research (as defined in section 164.501 of title 45, Code of Federal Regulations) in relevant areas as determined by the Secretary. (C) Payers Private and public health care payers, including group health plans, health insurance coverage offered by health insurance issuers, Federal health programs, and State health programs. (3) Exemption from Freedom of Information Act Except as described in paragraph (1), the Secretary may not be compelled to disclose the information submitted under subsection (a) to any individual or entity. For purposes of section 552 of title 5, United States Code (commonly referred to as the Freedom of Information Act), this paragraph shall be considered a statute described in subsection (b)(3)(B) of such section. (c) Penalties (1) Data sharing agreements Subject to paragraph (3), any specified data sharing individual or entity described in subsection (b)(2) that violates the terms of a data sharing agreement the individual or entity has with the Secretary under subsection (b)(1) shall be subject to a civil money penalty of not less than $1,000, but not more than $10,000, for each such violation. Such penalty shall be imposed and collected in the same