A State plan must provide, under a State statute that imposes legal sanctions, safeguards meeting the requirements of this subpart that restrict the use or disclosure of information concerning applicants and beneficiaries to purposes directly connected with the administration of the plan.