; or (2) if there is no such sale, subscription, or establishment, before the user uses the service. (c) Persistent availability The notice required by subsection (a) shall be made persistently available. (d) Material changes A provider of a covered service shall provide a user of the service with clear and conspicuous advance notice of any material change to the privacy policies of the provider with respect to the service. 4. User opt-in or opt-out approval rights based on sensitivity of information (a) Opt-In approval required for sensitive user information Except as provided in subsection (c), a provider of a covered service shall obtain opt-in approval from a user to use, disclose, or permit access to the sensitive user information of the user. (b) Opt-Out approval required for non-Sensitive user information Except as provided in subsection (c), a provider of a covered service— (1) shall obtain opt-out approval from a user to use, disclose, or permit access to any of the non-sensitive user information of the user