; (2) the Secretary of Homeland Security publishes a privacy impact assessment for the unified application that is similar to the privacy assessment conducted under section 208(b)(1)(B) of the E-Government Act of 2002 ( 44 U.S.C. 3501 note); and (3) the Administrator, in consultation with disaster assistance agencies, publishes standard rules of behavior for disaster assistance agencies and personnel granted access to disaster assistance information to protect such information from improper disclosure. (f) Certification of disaster assistance agencies (1) In general The Administrator may certify a Federal agency as a disaster assistance agency after posting an agreement between the Administrator and the Federal agency on a public website that contains the detailed terms of the agreement. (2) Contents of agreement An agreement between the Administrator and a Federal agency described in paragraph (1) shall state that the Federal Emergency Management Agency and the Federal agency will— (A) collect, disclose, maintain, and use disaster assistance information in accordance with— (i) this section; and (ii) subject to subsection (i)(2), any existing policies of the Federal Emergency Management Agency and the Federal agency for information protection and use; (B) train any personnel granted access to disaster assistance information on the rules of behavior established by the Administrator under subsection (e)(3); (C) in the event of any unauthorized disclosure of disaster assistance information— (i) not later than 24 hours after discovering the unauthorized disclosure— (I) in the case of an unauthorized disclosure by the Federal agency, notify the Administrator of the disclosure; and (II) in the case of an unauthorized disclosure by the Federal Emergency Management Agency, notify disaster assistance agencies of the disclosure; (ii) cooperate fully with the Administrator and disaster assistance agencies in the investigation and remediation of the disclosure