; (ii) the annual revenue of the covered provider; and (iii) the number of individuals about whom the covered provider collects records; (B) restrict disclosure of records maintained by covered providers; (C) provide that— (i) an individual may request access to a record (or a portion thereof) maintained by a covered provider that relates to the individual; and (ii) upon a request under clause (i), the covered provider shall— (I) provide the individual with access to the record (or the relevant portion thereof); or (II) if the covered provider so elects, delete the record (or the relevant portion thereof), subject to the requirements to keep and provide an accounting under subparagraph (G); (D) provide that if an individual demonstrates that a record relating to the individual is not accurate, relevant, timely, or complete (as those terms are defined by the Commission)— (i) the individual may request that the covered provider amend the record; and (ii) upon a request under clause (i), the covered provider shall amend the record; (E) establish a process modeled on the process established under section 611(a) of the Fair Credit Reporting Act ( 15 U.S.C. 1681i(a) )— (i) through which an individual and a covered provider may resolve a dispute under subparagraph (D) of this paragraph regarding the assertion that a record relating to the individual is not accurate, relevant, timely, or complete; and (ii) that does not require the individual to incur any expense; (F) in accordance with accepted standards and in consultation with the Secretary of Commerce, establish a code of fair information practices , for the secure collection, maintenance, and dissemination of records, with which a covered provider must comply