; and (G) amounts paid directly or indirectly in rebates, fees, or any other type of remuneration to brokers, consultants, advisors, or any other individual or firm for the referral of the group health plan's or health insurance issuer's business to the pharmacy benefits manager. (2) Privacy requirements Health insurance issuers offering group health insurance coverage and entities providing pharmacy benefits management services on behalf of a group health plan shall provide information under paragraph (1) in a manner consistent with the privacy, security, and breach notification regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996, and shall restrict the use and disclosure of such information according to such privacy regulations. (3) Disclosure and redisclosure (A) Limitation to business associates A group health plan receiving a report under paragraph (1) may disclose such information only to business associates of such plan as defined in section 160.103 of title 45, Code of Federal Regulations (or successor regulations). (B) Clarification regarding public disclosure of information Nothing in this section prevents a health insurance issuer offering group health insurance coverage or an entity providing pharmacy benefits management services on behalf of a group health plan from placing reasonable restrictions on the public disclosure of the information contained in a report described in paragraph (1), except that such issuer or entity may not restrict disclosure of such report to the Department of Health and Human Services, the Department of Labor, the Department of the Treasury, the Comptroller General of the United States, or applicable State agencies. (C) Limited form of report The Secretary shall define through rulemaking a limited form of the report under paragraph (1) required of plan sponsors who are drug manufacturers, drug wholesalers, or other direct participants in the drug supply chain, in order to prevent anti-competitive behavior. (4)