; (E) geolocation information; (F) the content of a message; (G) protected health information, as defined in section 160.103 of title 45, Code of Federal Regulations, or any successor regulation; and (H) nonpublic personal information, as defined in section 509 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6809 ). 3. Privacy protections (a) Transparency and terms of service (1) Disclosure and obtaining initial consent and privacy preferences (A) In general Before a user creates an account with, or otherwise begins to use, a covered online platform, the operator of the online platform shall— (i) inform the user that, unless the user makes an election under clause (ii)(II), personal data of the user produced during the online behavior of the user, whether on the online platform or otherwise, will be collected and used by the operator and third parties; and (ii) provide the user the option to specify the privacy preferences of the user, including by— (I) agreeing to the terms of service for use of the online platform, including, except as provided in subclause (II), the collection and use of personal data described in clause (i); and (II) prohibiting, if the user so elects, the collection and use of personal data described in clause (i), subject to subparagraph (B). (B) Consequence of prohibition of data collection If the election of a user under subparagraph (A)(ii)(II) creates inoperability in the online platform, the operator of the online platform may deny certain services or completely deny access to the user. (C) Form of disclosure An operator of a covered online platform shall provide a user of the online platform with the terms of service for use of the online platform, including the collection and use of personal data described in subparagraph (A)(i), in a form that— (i) is— (I) easily accessible; (II) of reasonable length; and (III) clearly distinguishable from other matters