(d) Regulations.—

(1) IN GENERAL.—Not later than 180 days after the date of the enactment of this Act, the Commission shall promulgate, under section 553 of title 5, United States Code, regulations to carry out this section, including regulations relating to the following:

(A) How an operating system provider can—

(i) verify the date of birth of a parent or legal guardian described in subsection (a)(2); and

(ii) carry out the requirements described in subsection (a) with respect to an operating system of such provider that may be shared by individuals of varying ages.

(B) Data protection standards related to how an operating system provider shall ensure a date of birth collected by the operating system provider from a user, or the parent or legal guardian of the user, to carry out this section and any regulation promulgated under this section—

(i) is collected in a secure manner to maintain the privacy of the user or the parent or legal guardian of the user; and

(ii) is not stolen or breached.