; (D) provides an applicant with information and documentation relating to an application for a disaster assistance program submitted by such applicant; and (E) contains any other capabilities determined necessary by the head of a disaster assistance agency. (b) Data security The Administrator may facilitate the collection of disaster assistance information into the unified disaster application system established under subsection (a) only after the following requirements have been met: (1) The Administrator certifies that the unified disaster application system substantially complies with the data security standards and best practices established pursuant to subchapter II of chapter 35 of title 44, United States Code, and any other applicable Federal information security policy. (2) The Secretary of Homeland Security publishes a privacy impact assessment for the unified disaster application system, in accordance with section 208(b)(1)(B) of the E-Government Act of 2002 ( 44 U.S.C. 3501 note). (3) The Administrator, after consulting with disaster assistance agencies, publishes standard rules of behavior for disaster assistance agencies, block grant recipients, and personnel granted access to disaster assistance information to protect such information from improper disclosure. (c) Collection and sharing of additional records and information (1) In general The Administrator may authorize the additional collection, maintenance, sharing, and use of disaster assistance information by publishing a notice on the unified disaster application system established under subsection (a) that includes a detailed description of— (A) the specific amendments to the collection, maintenance, and sharing of disaster assistance information authorized; (B) why each such amendment to how disaster assistance information is collected, maintained, or shared is necessary to carry out the purposes of a disaster assistance program and consistent with the fair information practice principles