; and (F) facilitating the creation of, or supporting, State all-payer claims databases. (4) Period of contract (A) In general A contract awarded under this section shall be for a period of 5 years and may be renewed, subject to the full and open competition procedures described in paragraph (1). (B) Transition of contract In the case that a contract is not renewed for a subsequent 5-year period under subparagraph (A) after the use of the full and open competition procedures described in paragraph (1), the Secretary shall require the entity whose contract is expiring to transfer all data maintained by the health care claims database described in paragraph (5)(A) to the entity to whom the Secretary has awarded a contract for the subsequent 5-year period. The entity whose contract is expiring may not disclose such data to any other entity or keep such data after the expiration of such contract. (5) Requirements of contract Each contract awarded under this section shall require the entity awarded such contract to carry out each of the following: (A) Establish and maintain a health care claims database in accordance with the requirements of the HIPAA privacy regulation. (B) Ensure that such health care claims database makes available data submitted under subsection (d) in accordance with the requirements of subsection (c). (C) In the case that the contract is not renewed after the end of the 5-year period of the contract, carry out the transfer of data required pursuant to paragraph (4)(B) in accordance with a schedule and process determined by the Secretary. (D) Comply with the HIPAA privacy regulation in the same manner and to the same extent as such regulation applies to a covered entity (as defined pursuant to such regulation). (E) Strictly limit staff access to such health care claims database to staff with appropriate training, clearance, and background checks, and require such staff to undergo regular privacy and security training. (F) Maintain effective security standards for transferring data from such