“The SECURE Data Act would require state attorneys general to enforce its provisions in federal court, rather than state courts.”