; (L) the effective date of the notice; and (M) how the covered entity will communicate material changes of the privacy policy to the young consumer or the parent of a child. (2) Consent required (A) In general Such regulations shall require a covered entity that has actual or constructive knowledge that such covered entity is processing covered information about a young consumer or child— (i) to provide clear and concise notice to a young consumer or the parent of a child of the items of covered information about such young consumer or child, respectively, that is processed by such covered entity and how such covered entity processes such covered information and obtain verifiable consent for such processing; and (ii) if such covered entity determines, including through constructive knowledge, that such covered entity has not obtained verifiable consent for the processing of covered information about a young consumer or child, to, not later than 48 hours after such determination— (I) obtain verifiable consent; or (II) delete all covered information about such young consumer or child. (B) When consent not required Such regulations shall provide that verifiable consent under this paragraph is not required in the case of— (i) online contact information collected from a young consumer or child that— (I) is used only to respond directly on a one-time basis to a specific request from the young consumer or child; (II) is not used to re-contact the young consumer or child; and (III) is not retained by the covered entity after responding as described in subclause (I); (ii) a request for the name or online contact information of a young consumer or the parent of a child that is used for the sole purpose of obtaining verifiable consent or providing notice under subparagraph (A)(i) and where such information is not retained by the covered entity if verifiable consent is not obtained within 48 hours; or (iii) the processing of such information by the covered entity is necessary— (I) to respond to judicial process