; and (D) ensure that data is encrypted, in accordance with the HIPAA privacy regulation. (4) Other data (A) Medicaid data The Administrator of the Centers for Medicare & Medicaid Services shall submit all health care claims data with respect to the Medicare program under title XVIII of the Social Security Act ( 42 U.S.C. 1395 et seq.) and the Medicaid program under title XIX of such Act ( 42 U.S.C. 1396 et seq.) in accordance with scope, format, and de-identification requirements applicable pursuant to paragraphs (2) and (3). (B) TRICARE The Secretary of Defense shall submit all health care claims data with respect to the TRICARE program under chapter 55 of title 10, United States Code, in accordance with scope, format, and de-identification requirements applicable pursuant to paragraphs (2) and (3). (C) FEHB The Director of the Office of Personnel Management shall submit all health care claims data with respect to the Federal Employee Health Benefits program in accordance with scope, format, and de-identification requirements applicable pursuant to paragraphs (2) and (3). (D) State data The entity maintaining the health care claims database under this section may collect data from State all-payer claims databases that seek access to such health care claims database. A State may require health insurance issuers and other payers to submit claims data to a State-mandated all-payer claims database, provided that such data is submitted in a form and manner established by the Secretary. A State may also require health insurance issuers and other payers to submit claims data to the health care claims database maintained under this section, provided that such data is submitted in a form and manner established by the Secretary and consistent with scope, format, and de-identification requirements applicable pursuant to paragraphs (2) and (3). (5) Prohibition Any individual or entity required to submit data under this subsection may not place any restrictions on the use of such data by authorized users under subsection