; and (iv) ensure that individually identifiable data is encrypted, in accordance with guidance issued by the Secretary under section 13402(h)(2) of the HITECH Act. (2) Applicable self-insured group health plan For purposes of paragraph (1), a self-insured group health plan is an applicable self-insured group health plan if such plan is self-administered, or is administered by a third-party plan administrator that meets 1 or both of the following criteria: (A) Administers health, medical, or pharmacy benefits for more than 50,000 enrollees. (B) Is one of the 5 largest administrators or issuers of self-insured group health plans in a State in which such administrator operates, as measured by the aggregate number of enrollees in plans administered by such administrator in such State, as determined by the Secretary. (3) Third-party administrators In the case of a third-party administrator that is required under this subsection to submit claims data with respect to an applicable self-insured group health plan, such administrator shall submit claims data with respect to all self-insured group health plans that the administrator administers, including such plans that are not applicable self-insured group health plans, as described in paragraph (2). (4) Receiving other information (A) Medicare data The Secretary, through rulemaking, shall ensure that the data made available to such entity is available to qualified entities under section 1874(e) of the Social Security Act is made available to each entity awarded a contract under subsection (a). (B) State data An entity awarded a contract under subsection (a) shall collect data from State all payer claims databases that seek access to the database established under this section. (5) Availability of data An entity required to submit data under this subsection may not place any restrictions on the use of such data by authorized users. (e) Uses of information (1) In general An entity awarded a contract under subsection (a) shall make the database available to users who are