; and (bb) deactivate the current chip-enabled EBT card on the date that is the earlier of— (AA) the date on which the new chip-enabled EBT card is activated; and (BB) 30 days after the date on which the new chip-enabled EBT card is sent to the household. (iii) Sunset for requirement to use chip technology Under the cybersecurity regulations described in clause (i), all EBT cards issued during the 5-year period following the deadline for carrying out clause (ii)(VIII) shall be chip-enabled, unless the Secretary extends that period. (C) Reimbursements Each State upgrading EBT cards to comply with the regulations promulgated under subparagraph (B)(i) shall receive reimbursement from the Secretary in an amount determined by the Secretary to cover all reasonable costs incurred by the State, including— (i) the 1-time up-front costs paid by the State to card vendors; (ii) the additional annual fees associated with chip-enabled cards paid by States to card vendors; and (iii) postage or other delivery-related costs. (D) Prohibition on password and PIN requirements inconsistent with federal cybersecurity standards Beginning 60 days after the date of enactment of this paragraph, a State agency may not require, with respect to a PIN for use of an EBT card or a password for access to an online account or mobile application managing the EBT card— (i) that the PIN or password be periodically changed in circumstances that are prohibited by the NIST PIN and password standards