; (B) procedures and processes for the submission of reports; (C) criteria for incidents that may be reported to such system; and (D) procedures for privacy and anonymization. (4) Prototyping and testing The Secretary shall test and prototype the reporting system for not less than 1 year before finalizing the reporting system. (5) External feedback The Secretary shall seek feedback on development of the reporting system from external stakeholders, including prior to publication of the information under paragraph (3) and prior to introduction of prototypes and finalization of such system under paragraph (4). (c) FOIA (1) In general Information submitted to, or derived from, the reporting system shall be exempt from disclosure under section 552 of title 5, United States Code. (2) Applicability For purposes of paragraph (1), this section shall be considered a statute described in section 552(b)(3)(B) of title 5, United States Code. (d) Prohibition on use as evidence Information submitted to, or derived from, the reporting system shall not be used in any Federal or State enforcement action or criminal prosecution. (e) Privacy