PRIVACY AND SECURITY STANDARDS APPLICABLE TO ARRA REQUIREMENTS