; and (2) allow individuals in the registry, at any time, to opt out of the registry under this section and health monitoring under subsection (d). (c) Grants to States The Director may award grants to States to encourage and facilitate the inclusion of eligible individuals in the registry under this section. (d) Health monitoring (1) In general Beginning not later than 180 days after the date of the enactment of this Act, the Director shall monitor the health of the individuals in the registry under this section who, at some point during or after the emergency period, tested positive through diagnostic or serological testing for a present or past infection with the virus that causes COVID–19. (2) Duration Subject to subsection (b)(2), in carrying out monitoring under paragraph (1), the Director shall, with respect to each individual in the registry under this section, conduct such monitoring for the lifetime of the individual. (e) Privacy requirements The data collection and analysis necessary for the registry under this section and monitoring under subsection (d) shall be conducted and maintained in a manner that protects the confidentiality of individually identifiable health information consistent with applicable statutes and regulations, including, as applicable, HIPAA privacy and security law (as defined in section 3009(a)(2) of the Public Health Service Act ( 42 U.S.C. 300jj–19(a)(2) ) and section 552a of title 5, United States Code. (f) Availability for research Subject to subsection (e), in addition to using the registry under this subsection for health monitoring under subsection (d), the Director shall make the information in the registry available to researchers for public health research. (g) Preliminary report Not later than 180 days after the date of the enactment of this Act, the Director shall submit to Congress a preliminary report on overall health outcomes of individuals in the registry under subsection (a), including— (1) recommendations on best practices for protecting workers described in