collects. (c) Consistency The requirements prescribed under subsection (a) shall be consistent with guidance provided by the Commission and recognized industry practices for safety and security on the day before the date of enactment of this Act. (d) Technological means In a rule prescribed under subsection (a), the Commission may not require a specific technological means of meeting a requirement. 112. Accountability Each covered entity shall, in a manner proportional to the size, type, and nature of the covered information it collects— (1) have managerial accountability, proportional to the size and structure of the covered entity, for the adoption and implementation of policies consistent with this title