(2) The information system established under paragraph (1) shall include
(A) a financial management system,
(B) a patient care information system for each area served by the Service,
(C) a privacy component that protects the privacy of patient information held by, or on behalf of, the Service, and
(D) a services-based cost accounting component that provides estimates of the costs associated with the provision of specific medical treatments or services in each area office of the Service.