; and (B) the entity will not share or disclose the data in disaggregated form, in a manner that would make any personally identifiable information discernible, with any individual or entity that has not been approved by the Department of Homeland Security to receive it. (3) Privacy protection Any government official who uses information contained in the database established under subsection (a) shall take reasonable steps to ensure that such use does not enable such information to be manipulated— (A) to identify an individual nonimmigrant to whom the information relates; or (B) to disaggregate such information into its component parts. (d) Rulemaking The Secretary of Homeland Security shall— (1) promulgate a rule that establishes— (A) procedures for requesting and accessing information contained in the database established under subsection (a), which access may not be limited to fewer than 5 years; and (B) security procedures for protecting such information, including rules relating to personnel security, physical security, and network security; and (2) promulgate regulations making the information described in subsection (a) available to the public in a searchable database format, except for— (A) any personally identifiable information, including— (i) worksite address, but shall include the State in which the worksite is located; and (ii) the names of any household employers; (B) any query that returns fewer than 10 workers