; and (G) amounts paid directly or indirectly in rebates, fees, or any other type of remuneration to brokers, consultants, advisors, or any other individual or firm who referred the group health plan's or health insurance issuer's business to the pharmacy benefit manager. (2) Privacy requirements Health insurance issuers offering group health insurance coverage and entities providing pharmacy benefits management services on behalf of a group health plan shall provide information under paragraph (1) in a manner consistent with the privacy, security, and breach notification regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (or successor regulations), and shall restrict the use and disclosure of such information according to such privacy regulations. (3) Disclosure and redisclosure (A) Limitation to business associates A group health plan receiving a report under paragraph (1) may disclose such information only to business associates of such plan as defined in section 160.103 of title 45, Code of Federal Regulations (or successor regulations). (B) Clarification regarding public disclosure of information Nothing in this section prevents a health insurance issuer offering group health insurance coverage or an entity providing pharmacy benefits management services on behalf of a group health plan from placing reasonable restrictions on the public disclosure of the information contained in a report described in paragraph (1). (c) Limitations on spread pricing (1) Prescription drug transactions with pharmacies independent of the issuer or pharmacy benefits manager If the pharmacy that dispenses a prescription drug to an enrollee in a group health plan or group or individual health insurance coverage is not wholly or partially owned by such plan, such issuer, or an entity providing pharmacy benefit management services under such plan or coverage, such plan, issuer, or entity shall not charge the plan, issuer, or enrollee a price for such prescription drug that