or as permitted by the HIPAA Privacy Rule (45 CFR parts 160 and 164, subparts A and E). (ii) Clarification regarding public disclosure of information Nothing in this section shall prevent a group health plan or health insurance issuer offering group health insurance coverage, or a covered service provider, from placing reasonable restrictions on the public disclosure of the information described in this subparagraph, except that such plan, issuer, or entity may not restrict disclosure of such information to the Department of Labor. (F) Additional privacy requirements (i) In general Covered service providers shall ensure that information provided under subparagraph (B) contains only summary health information, as defined in section 164.504(a) of title 45, Code of Federal Regulations (or successor regulations). (ii) Restrictions A group health plan must comply with section 164.504(f) of title 45, Code of Federal Regulations and a responsible plan administrator who is a plan sponsor must act in accordance with the terms of the agreement described in such section. (G) Rule of construction Nothing in this section shall be construed to modify the requirements for the creation, receipt, maintenance, or transmission of protected health information under the HIPAA privacy regulations (as defined in section 1180(b)(3) of the Social Security Act). . (d) Implementation Not later than 1 year after the date of enactment of this Act, the Secretary of Labor shall issue notice and comment rulemaking as necessary to implement the provisions of this section. The Secretary shall ensure that such rulemaking— (1) accounts for the varied compensation practices of covered service providers (as defined under section 408(b)(2)(B)