; and (ix) conduct regular outreach and messaging, across Department components, of available training opportunities and resources. (D) Confidentiality; limitation (i) Confidentiality Activities described in subparagraph (C) may not include the publication of any personally identifiable information. (ii) Limitation Personally identifiable information collected pursuant to subparagraph (C) may not be maintained or used for any purpose other than implementation of this section, unless otherwise permitted under applicable law. Any such personally identifiable information that is so collected, maintained, or used pursuant to this section is subject to applicable public nondisclosure requirements, including sections 552 and 552a of title 5, United States Code. (E) Personnel (i) Management The Workplace Health and Wellness Coordinator of the Department, under the direction of the Chief Medical Officer of the Department, shall be responsible for the ongoing management of the Program. (ii) Minimum core personnel requirements Subject to appropriations, the Secretary shall ensure the Program is staffed with the number of employees the Chief Medical Officer of the Department determines necessary to carry out the duties described in subparagraph (C), including representatives from each Department component and the Office of the Chief Privacy Officer. (2) Directive Not later than 180 days after the date of the enactment of this section, the Chief Medical Officer of the Department shall— (A) issue a directive or policy that outlines the roles and responsibilities of the Program