design and operate a system to identify suspicious orders for the registrant;

ensure that the system designed and operated under paragraph (1) by the registrant complies with applicable Federal and State privacy laws; and

upon discovering a suspicious order or series of orders, notify the Administrator of the Drug Enforcement Administration and the Special Agent in Charge of the Division Office of the Drug Enforcement Administration for the area in which the registrant is located or conducts business.