; or (iv) to a contractor or agent for purposes of health plan administration, if such contractor or agent agrees, in writing, and as a term of the contract, to abide by the same use and disclosure restrictions as the plan sponsor. (C) Relationship to HIPAA regulations With respect to the HIPAA privacy regulations, as defined in section 1180(b)(3) of the Social Security Act, subparagraph (B) does not prohibit a covered entity (as defined for purposes of such regulations promulgated under section 264 of the Health Insurance Portability and Accountability Act of 1996) from any use or disclosure of health information that is authorized for the covered entity under such regulations. The previous sentence does not affect the authority of such Secretary to modify such regulations. (D) Written notice Plan sponsors of group health plans and group health insurance coverage shall provide to each employee written notice informing the employee of the requirement for health insurance issuers or entities providing pharmacy benefit management services on behalf of the plan or coverage to submit reports to plan sponsors under paragraphs (1) and (3), as applicable, which may include incorporating such notification in plan documents provided to the employee, an employee handbook provided to the employee, or individual notification. (E) Enforcement (i) In general The powers, procedures, and remedies provided in section 207 of the Genetic Information Nondiscrimination Act to a person alleging a violation of title II of such Act shall be the powers, procedures, and remedies this subparagraph provides for any person alleging a violation of this paragraph. (ii) Prohibition against retaliation No person shall discriminate against any individual because such individual has opposed any act or practice made unlawful by this paragraph or because such individual made a charge, testified, assisted, or participated in any manner in an investigation, proceeding, or hearing under this paragraph. The remedies and procedures otherwise provided for