; (II) the borrower should use caution when dealing with those companies; and (III) the services that those companies typically provide are already offered to borrowers free of charge through the Department or the borrower's servicer; and . 4. Prevention of improper access Section 485B of the Higher Education Act of 1965 ( 20 U.S.C. 1092b ) is amended— (1) by redesignating subsections (e) through (h) as subsections (f) through (i), respectively; (2) in subsection (d)— (A) in paragraph (5)(C), by striking and after the semicolon; (B) in paragraph (6)(C), by striking the period at the end and inserting ; and ; and (C) by adding at the end the following: (7) preventing access to the data system and any other system used to administer a program under this title by any person or entity for the purpose of assisting a student in managing loan repayment or applying for any repayment plan, consolidation loan, or other benefit authorized by this title, unless such access meets the requirements described in subsection (e). ; (3) by inserting after subsection (d) the following: (e) Requirements for third-Party data system access (1) In General As provided in paragraph (7) of subsection (d), an authorized person or entity described in paragraph (2) may access the data system and any other system used to administer a program under this title if that access— (A) is in compliance with terms of service, information security standards, and a code of conduct which shall be established by the Secretary and published in the Federal Register; (B) is obtained using an access device (as defined in section 1029(e)(1) of title 18, United States Code) issued by the Secretary to the authorized person or entity