; and (H) the competitive impact of pharmacy benefit managers' business practices, including the impact that such business practices have on the cost of health plan premiums or prescription drugs for consumers; and (2) provides recommendations for legislative action to lower the cost of prescription drugs for consumers and payors, improve the efficiency of the pharmaceutical supply chain by lowering intermediary costs, improve competition in pharmacy benefit management, and provide transparency in pharmacy benefit management. (d) Privacy requirements Any entity shall provide information under subsection (a) in a manner consistent with the privacy, security, and breach notification regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note) (or any successor regulation), and shall restrict the use and disclosure of such information according to such regulations. 5. Whistleblower protections (a) In general A pharmacy benefit manager, health plan, pharmaceutical manufacturer, pharmacy, or any affiliate, subsidiary, or agent thereof shall not, directly or indirectly, discharge, demote, suspend, diminish, or withdraw benefits from, threaten, harass, or in any other manner discriminate against or adversely impact a covered individual because— (1) the covered individual, or anyone perceived as assisting the covered individual, takes (or is suspected to have taken or will take) a lawful action in providing to Congress, an agency of the Federal Government, the attorney general of a State, a State regulator with authority over the distribution or insurance coverage of prescription drugs, or a law enforcement agency relating to any act or omission that the covered individual reasonably believes to be a violation of this Act