purposes. (3) Destruction of database The Secretary shall destroy the database within 30 days after the Council terminates. (4) Violations (A) Any person who, by virtue of an official position or affiliation with the Secretary, the Council, or the External Partner— (i) has possession of, or access to, any record containing individually identifiable information the disclosure of which is prohibited by or under this Act