devices, services, applications, and software (a) In general Not later than 6 months after the date on which the report is submitted under section 5(d), the Secretary, in consultation with the Chairman of the Federal Trade Commission, the National Coordinator, relevant stakeholders, and heads of such other Federal agencies as the Secretary considers appropriate, shall promulgate regulations to help strengthen privacy and security protections for consumers’ personal health data that is collected, processed, analyzed, or used by consumer devices, services, applications, and software. (b) Requirements (1) In general The Secretary shall ensure that the regulations pursuant to subsection (a)— (A) account for differences in the nature and sensitivity of the data collected or stored on the consumer device, service, application, or software