; (F) in accordance with accepted standards and in consultation with the Secretary of Commerce, establish a code of fair information practices , for the secure collection, maintenance, and dissemination of records, with which a covered provider must comply; (G) require a covered provider, in a manner substantially similar, to the extent practicable, to the requirements applicable to agencies under section 552a(c) of title 5, United States Code, to— (i) keep an accounting of certain disclosures of records for a reasonable period of time, as determined by the Commission; and (ii) make available to an individual, upon request, the accounting made under clause (i) of disclosures of records relating to the individual, unless the period of time described in that clause has expired; and (H) to the extent practicable, incorporate the exceptions under paragraphs (1) through (12) of section 552a(b) of title 5, United States Code; and (2) may promulgate regulations not described in paragraph (1) that are modeled on section 552a of title 5, United States Code, and the regulations promulgated under that section. (c) Application with other Federal laws (1) Exemption for persons subject to other Federal privacy laws To the extent that a person is subject to a Federal privacy law described in paragraph (2) of this subsection, the regulations promulgated under subsection (a) shall not apply to the person with respect to any information or records governed by that Federal privacy law. (2) Other Federal privacy laws described The Federal privacy laws described in this paragraph are as follows: (A) The regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note), as those regulations relate to— (i) a person described in section 1172(a) of the Social Security Act ( 42 U.S.C. 1320d–1(a) )