; (C) reject, deny, or recoup reimbursement for a prescription drug claim based on the format in which the prescription was issued; or (D) require a participating provider to use a specific vendor for electronic prescribing or a specific electronic prescribing product or system. (6) Attestation of compliance Beginning on January 1, 2026, each group health plan shall annually submit to the Secretary, the Secretary of Health and Human Services, and the Secretary of Labor an attestation of compliance with the requirements of this subsection. (7) Consultation requirement for rulemaking In promulgating regulations to carry out this subsection, the Secretary, the Secretary of Health and Human Services, and the Secretary of Labor shall jointly consult with dispensers of controlled substances, State insurance regulators, health insurance issuers offering group or individual health insurance coverage, and health care practitioners. . (d) Update of biometric component of multifactor authentication Not later than 1 year after the date of enactment of this Act, the Attorney General shall finalize a regulation updating the requirements for the biometric component of multifactor authentication with respect to electronic prescriptions of controlled substances, as required under section 2003(c) of the SUPPORT for Patients and Community Act ( Public Law 115–271 ).