106 STAT. 2060 PUBLIC LAW 102-408—OCT. 13, 1992 Reports- "(B) such State or entity shall collect such information and report it to the Secretary in such form and manner as the Secretary shall prescribe; and "(C) such State or entity shall comply with the requirements of subsection (e). "(d) REPORTS TO CONGRESS.— The Secretary shall submit to the Congress on October 1, 1993, and biennially thereafter, the following reports: "(1) A comprehensive report regarding the status of health personnel according to profession, including a report regarding the analytic and descriptive studies conducted under this section. "(2) A comprehensive report regarding applicants to, and students enrolled in, programs and institutions for the training of health personnel, including descriptions and analyses of student indebtedness, student need for financial assistance, financial resources to meet the needs of students, student career choices such as practice specialty and geographic location and the relationship, if any, between student indebtedness and career choices. " (e) REQUIREMENTS REGARDING PERSONAL DATA. — "(1) IN GENERAL. — The Secretary and each program entity shall in securing and maintaining any record of individually identifiable personal data (hereinafter in this subsection referred to as 'personal data') for purposes of this section— "(A) inform any individual who is asked to supply personal data whether he is legally required, or may refuse, to supply such data and inform him of any specific consequences, known to the Secretary or program entity, as the case may be, of providing or not providing such data; "(B) upon request, inform any individual if he is the subject of personal data secured or maintained by the Secretary or program entity, as the case may be, and make the data available to him in a form comprehensible to him; "(C) assure that no use is made of personal data which use is not within the purposes of this section unless an informed consent has been obtained from the individual who is the subject of such data; and "(D) upon request, inform any individual of the use being made of personal data respecting such individual and of the identity of the individuals and entities which will use the data and their relationship to the programs under this section. "(2) CONSENT AS PRECONDITION TO DISCLOSURE.— Any entity which maintains a record of personal data and which receives a request from the Secretary or a program entity for such data for purposes of this section shall not transfer any such data to the Secretary or to a program entity unless the individual whose personal data is to be so transferred gives an informed consent for such transfer. " (3) DISCLOSURE BY SECRETARY. — "(A) Notwithstanding any other provision of law, personal data collected by the Secretary or any program entity under this section may not be made available or disclosed by the Secretary or any program entity to any person other than the individual who is the subject of such data
�
