; limitation to business associates A group health plan receiving information or data under this paragraph may disclose such information only to the entity from which the information or data was received, the group health plan or plan sponsor to which the information or data pertains, or to that entity’s business associates as defined in section 160.103 of title 45, Code of Federal Regulations, or as otherwise permitted by the HIPAA Privacy Rule (45 CFR parts 160 and 164, subparts A and E). (F) Data standards Information made available under this section shall conform to the following standards: (i) Institutional, professional, and dental claims received from a healthcare provider shall be made available to the group health plan as ASC X12N 837 files. The files shall be unmodified copies of the files sent from the provider. In the event that paper claims are sent by the provider, they shall be converted to the ASC X12N 837 electronic format. Files shall be accessible to the plan at no cost to the group health plan. (ii) All claim payment (or EFT, electronic funds transfer) and electronic remittance advice (ERA) notices sent by a Covered Service Provider shall be made available to the group health plan as ASC X12N 835 files. The files shall be unmodified copies of the files sent by the Covered Service Provider to the healthcare provider. Files shall be accessible at no cost to the group health plan. (iii) The contractual terms containing calculation formulae, pricing methodologies, and other information used to determine the dollar value of reimbursement. (iv) All non-claim costs shall be itemized and made available to the group health plan in real time through a web-based portal, through an API, and through a downloadable CSV file. . (2) Civil enforcement (A) In general Subsection (c) of section 502 of such Act ( 29 U.S.C. 1132 ) is amended by adding at the end the following new paragraph: ‘‘(13) In the case of an agreement between a group health plan and a health care provider (including a health care facility),