; breach notifications (A) Regulations (i) In general The Secretary shall issue regulations prescribing the extent to which, and the manner in which, the following rules (and any successors of such rules) shall apply to the activities under this section of an entity receiving a contract under subsection (a): (I) The Privacy Rule under part 160 and subparts A and E of part 164 of title 45, Code of Federal Regulations (or any successor regulations). (II) The Security Rule under part 160 and subparts A and C of part 164 of such title 45 (or any successor regulations). (III) The Breach Notification Rule under part 160 and subparts A and D of part 164 of such title 45 (or any successor regulations). (ii) Supplemental regulations In order to ensure data privacy and security and the notification of breaches, the Secretary may issue such supplemental regulations on the subjects of the rules listed under clause (i) as the Secretary determines appropriate to address differences between the activities described by this section and the activities covered by such rules. (B) Enforcement Section 1176 of Social Security Act shall apply with respect to a violation of this paragraph in the same manner such section 1176 applies to a violation of part C of title XI of the Social Security Act, and the Secretary may include in the regulations promulgated under this section provisions to apply such section to this paragraph. (C) Procedure (i) Timing The Secretary shall issue the initial set of regulations under this paragraph not later than 1 year after the date of enactment of the Hospital Competition Act of 2020. (ii) Authority to use interim final procedures The Secretary may make such initial set of regulations effective and final immediately upon issuance, on an interim basis, and provide for a period of public comment on such initial set of regulations after the date of publication. (D) Requirements of entity An entity receiving the contract under this section shall— (i) not disclose to the public any individually identifiable