; (2) in subsection (a)— (A) by amending paragraph (1) to read as follows: (1) In general It is unlawful for an operator of a website, online service, online application, or mobile application directed to children, or an operator having actual knowledge that personal information being collected is from a child, to collect personal information from a child in a manner that violates the regulations prescribed under subsection (b). ; and (B) in paragraph (2)— (i) by striking of such a website or online service ; and (ii) by striking subsection (b)(1)(B)(iii) and inserting subsection (b)(1)(C)(iii) ; and (3) in subsection (b)— (A) by amending paragraph (1) to read as follows: (1) In general Not later than 1 year after the date of enactment of the Commercial Privacy Bill of Rights Act of 2017 , the Commission shall promulgate, under section 553 of title 5, United States Code, regulations to require an operator of a website, online service, online application, or mobile application directed to children, or an operator having actual knowledge that personal information being collected is from a child— (A) to provide clear and conspicuous notice in clear and plain language of the types of personal information the operator collects, how the operator uses such information, whether the operator discloses such information, and the procedures or mechanisms the operator uses to ensure that personal information is not collected from children except in accordance with the regulations promulgated under this paragraph; (B) to obtain verifiable parental consent for the collection, use, or disclosure of personal information of a child; (C) to provide to a parent whose child has provided personal information to the operator, upon request by and proper identification of the parent— (i) a description of the specific types of personal information collected from the child by the operator