; or (iii) the processing of such information by the covered entity is necessary— (I) to respond to judicial process; or (II) to the extent permitted under other provisions of law, to provide information to law enforcement agencies or for an investigation on a matter related to public safety. (C) Withdrawal of consent Such regulations shall further provide a young consumer or the parent of a child, as applicable, a mechanism to withdraw his or her consent at any time in a manner that is as easy as the mechanism to give consent. Such withdrawal of consent shall not be construed to affect the lawfulness of any processing based on verifiable consent before such withdrawal. (D) Prohibition on limiting or discontinuing service Such regulations shall prohibit a covered entity from refusing to provide a service, or discontinuing a service provided, to a young consumer or child, if the young consumer or parent of the child, as applicable, refuses to consent, or withdraws consent, to the processing of any covered information not essential to the covered entity to provide such service. (3) Retention of data (A) Retention Limitations Subject to the exceptions provided in subparagraph (B), such regulations shall prohibit a covered entity from keeping, retaining, or otherwise storing covered information for longer than is reasonably necessary for the purposes for which the covered information is processed. (B) Exceptions Further retention of covered information shall not be considered to be incompatible with the purposes of processing described in subparagraph (A) if such processing is necessary and done solely for the purposes of— (i) compliance with laws, regulations, or other legal obligations; (ii) preventing risks to the health or safety of a child or young adults or groups of children or young adults