; and (C) a summary document that includes that information described in subparagraphs (A) and (B) that the Secretary, the Secretary of Labor, and the Secretary of Health and Human Services determine useful for plan sponsors for purposes of selecting pharmacy benefit management services, provided that such summary documents include only aggregate information. (4) Privacy requirements (A) Relationship to HIPAA regulations Nothing in this section shall be construed to modify the requirements for the creation, receipt, maintenance, or transmission of protected health information under the HIPAA privacy regulations, as defined in section 1180(b)(3) of the Social Security Act ( 42 U.S.C. 1320d–9(b)(3) ). (B) Requirement A report submitted under paragraph (1) or (3) shall contain only summary health information, as defined in section 164.504(a) of title 45, Code of Federal Regulations (or successor regulations). (C) Clarification regarding certain disclosures of information (i) Reasonable restrictions Nothing in this section prevents an entity providing pharmacy benefit management services on behalf of a group health plan from placing reasonable restrictions (as the Secretary, the Secretary of Labor, and the Secretary of Health and Human Services may determine) on the public disclosure of the information contained in a report under paragraph (1) or (3). (ii) Limitations An entity providing pharmacy benefit management services on behalf of a group health plan may not restrict disclosure of such reports to the Department of Health and Human Services, the Department of Labor, the Department of the Treasury, or any other Federal agency responsible for enforcement activities under this section for purposes of enforcement under this section or other applicable law, or to the Comptroller General of the United States in accordance with paragraph (6). (5) Use and disclosure by plan sponsors (A) Prohibition A plan sponsor may not— (i) fail or refuse to hire, or discharge, any employee, or otherwise discriminate against any