; and (B) requesting the developer— (i) to refrain from any further collection of personal data through the application; and (ii) at the option of the user, either— (I) to the extent practicable, to delete any personal data collected by the application that is stored by the developer; or (II) to refrain from any further use or sharing of such data; and (2) within a reasonable and appropriate time after receiving a request under paragraph (1)(B), comply with such request. (c) Security of personal data and de-Identified data The developer of a mobile application shall take reasonable and appropriate measures to prevent unauthorized access to personal data and de-identified data collected by the application. (d) Exception Nothing in this Act prohibits the developer of a mobile application from disclosing or preserving personal data or de-identified data as required by— (1) other Federal law (including a court order)