; and (iii) provide each correctional facility employee who is exposed to a positive COVID–19 case with guaranteed paid leave to quarantine, consistent with Centers for Disease Control and Prevention guidance, or until the employee has been confirmed to be negative for COVID–19. (c) Privacy Any data collected, stored, received, or published under this section shall— (1) be so collected, stored, received, or published in a manner that protects the privacy of individuals whose information is included in the data; (2) be deidentified or anonymized in a manner that protects the identity of all individuals whose information is included in the data; (3) comply with privacy protections provided under the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note)