; and (B) the specific purposes of those practices; (2) to provide accurate, clear, concise, and timely notice to individuals before implementing a material change in such practices; and (3) to maintain the notice required by paragraph (1) in a form that individuals can readily access. (b) Compliance and other considerations In the rulemaking required by subsection (a), the Commission— (1) shall consider the types of devices and methods individuals will use to access the required notice; (2) may provide that a covered entity unable to provide the required notice when information is collected may comply with the requirement of subsection (a)(1) by providing an alternative time and means for an individual to receive the required notice promptly; (3) may draft guidance for covered entities to use in designing their own notice and may include a draft model template for covered entities to use in designing their own notice; and (4) may provide guidance on how to construct computer-readable notices or how to use other technology to deliver the required notice. 122. Individual participation (a) In general Not later than 180 days after the date of enactment of this Act, the Commission shall initiate a rulemaking proceeding to require each covered entity— (1) to offer individuals a clear and conspicuous mechanism for opt-in consent for any use of their covered information that would otherwise be unauthorized use; (2) to offer individuals a robust, clear, and conspicuous mechanism for opt-in consent for the use by third parties of the individuals' covered information for behavioral advertising or marketing; (3) to provide any individual to whom the personally identifiable information that is covered information pertains, and which the covered entity or its service provider stores, appropriate and reasonable— (A) access to such information; and (B) mechanisms to correct such information to improve the accuracy of such information