; (2) data security, in accordance with the most recent versions of the Cybersecurity Framework and Privacy Framework (or successor frameworks) of the National Institute of Standards and Technology; and (3) confidentiality and privacy of any information that pertains to an individual and from which, either alone or in combination with other reasonably available information, the individual's identity can be determined, including policies, practices, procedures, and controls for— (A) minimizing collection, processing, maintenance, retention, and disclosure of such information to what is necessary, proportionate, and limited for a good faith public health purpose that is clearly described and limited in an agreement between the Federal Government and the recipient; (B) prohibiting disclosure of such information to persons, including government entities, absent legal safeguards included in Federal or State laws or regulations, for protecting the security and privacy of such information; and (C) making the data available to the National Center for Health Statistics for statistical purposes under subchapter III of chapter 35 of title 44, United States Code. (c) COVID–19 reporting The Secretary may not award a grant or cooperative agreement under subsection (a) unless the applicant agrees— (1) to use the grant for activities under subsection (a) with respect to COVID–19, including with respect to— (A) testing results data; (B) testing results turnaround time; (C) hospitalization and intensive care unit data; (D) new infections among health care workers; (E) new cases among quarantined contacts; and (F) long-term care facilities, prisons, and other congregate settings