Notwithstanding any other provision of law, no individual may be enrolled in a qualified health plan offered in a State through an Exchange under part 2 of subtitle D of title I of the Patient Protection and Affordable Care Act (
42 U.S.C. 18031 et seq.) until the date the State certifies to the Secretary of Health and Human Services and the Secretary certifies to Congress that there are standards and a process in place in the State to protect the personal information (including Social Security numbers and financial information) of individuals being enrolled through the Exchange.