; (13) developing model privacy, data protection, and fair information practices, standards, guidelines, policies, and routine uses for use by the private sector; (14) issuing rules, orders, and guidance implementing Federal privacy law; (15) upon written request, providing appropriate assistance to the private sector in implementing privacy, data protection, and fair information practices, principles, standards, guidelines, policies, or routine uses of privacy and data protection, and fair information; and (16) enforce other privacy statutes and rules as authorized by Congress. 7. Rulemaking authority (a) In general The Agency is authorized to exercise its authorities under this Act and Federal privacy law to administer, enforce, and otherwise implement the provisions of this Act and Federal privacy law. (b) Rulemaking, orders, and guidance (1) General authority The Director may prescribe rules and issue orders and guidance, as may be necessary or appropriate to enable the Agency to administer and carry out the purposes and objectives of this Act and Federal privacy law, and to prevent evasions thereof. (2) Regulations The Agency may issue such regulations, after notice and comment in accordance with section 553 of title 5, United States Code, as may be necessary to carry out this Act. (3) Standards for rulemaking In prescribing a rule under the Federal privacy laws— (A) the Agency shall consider— (i) the potential benefits and costs to individuals or groups of individuals; and (ii) the impact of proposed rules on individuals or groups of individuals; (B) the Agency may provide that a rule shall only apply to a subcategory of covered entities, as defined by the Agency