; or (2) incorporated into an existing or planned information technology solution for human resources, accountability, or other similar functions, but only if such system complies with the requirements of subsection (c). (c) Privacy and security (1) In general The database established pursuant to subsection (a) shall have privacy, user-based, time-limitation, and access controls to ensure only those with a need to know can access the information. (2) Protocols (A) In general The Secretary shall, in consultation with the General Counsel of the Department, the Assistant Secretary for Information and Technology, the Chief Human Capitol Officer, and the Assistant Secretary for Accountability and Whistleblower Protection, and the heads of such other relevant offices of the Department, develop protocols for who can have access to the database established pursuant to subsection (a) and when, so as to preserve privacy, preserve due process, and strengthen accountability and whistleblower protection. (B) Annual reviews The Secretary shall review the protocols developed pursuant to subparagraph (A) not less frequently than once each year. (d) Features The database established pursuant to subsection (a) shall include, at a minimum, the ability to filter data in the database and search such data by the following: (1) Outcome of an administrative investigation board or other official investigatory process. (2) The implementation status of the recommendations or other actions included in a final administrative investigation board or other official investigatory process. (3) Summary of facts of a case. (4) Relevant final documents and interviews, findings, and adjudication. (5) Grade of employee. (6) Status of administrative investigation board review or other official investigatory process. (7) Date of initiation and whether a case is open but not concluded or other such status. (8) Date of closure of an administrative investigation board or other official investigatory process. (9) Employee name. (10) Administration, staff