; and (ii) requiring all such persons to implement and maintain such safeguards. (3) Treatment of entities governed by other Federal law Any covered entity who is in compliance with any other Federal law that requires the covered entity to maintain standards and safeguards for information security and protection of personal information that, taken as a whole and as the Commission shall determine in the rulemaking required under this subsection, provide protections substantially similar to, or greater than, those required under this subsection, shall be deemed to be in compliance with this subsection. (b) Special requirements for information brokers (1) Submission of policies to the FTC The regulations promulgated pursuant to subsection (a) shall include a requirement for an information broker to submit each security policy of the broker to the Commission in conjunction with a notification of a breach of security under section 3 or upon request of the Commission. (2) Post-breach audit For any information broker required to provide notification under section 3, the Commission may conduct audits of the information security practices of such information broker, or require the information broker to conduct independent audits of such practices (by an independent auditor who has not audited the information broker’s security practices during the preceding 5 years). (3) Accuracy of and individual access to personal information The regulations promulgated pursuant to subsection (a) shall include a requirement for the following: (A) Accuracy (i) In general Each information broker to establish reasonable procedures to assure the maximum possible accuracy of the personal information the information broker collects, assembles, or maintains, and any other information the information broker collects, assembles, or maintains that specifically identifies an individual, other than information which merely identifies an individual’s name or address. (ii) Limited exception for fraud databases The requirement in clause (i) shall not