; and (B) provide individuals with the ability to submit a verified request to the covered entity to— (i) dispute the accuracy and completeness of such personal data; and (ii) request the appropriate correction of such personal data. (2) Dispute and correction Each covered entity shall ensure that the ability of an individual to dispute or request that the covered entity correct personal data as described in paragraph (1) is provided in a manner that is appropriate and reasonable based on the benefits and risks of harm to the individual regarding the accuracy of the personal data. (3) Exceptions for publicly available information A covered entity shall not be required to verify the accuracy of publicly available information if the covered entity has reasonable procedures to ensure that the publicly available information assembled or maintained by the covered entity accurately reflects the information available to the general public. (d) Right to erasure (1) In general Except for personal data collected and processed in accordance with a permissible purpose described in section 3(c), upon a verified request from an individual, a covered entity shall, without undue delay, delete or de-identify the personal data of the individual, and shall direct any service providers of the covered entity to delete or de-identify such data. (2) Special considerations In determining whether a covered entity that is a small business has complied with a verified request under paragraph (1) in a timely fashion, the Commission shall take into account the amount of time that the entity requires to comply with the request considering the technical feasibility, cost, and burden to the entity of complying with the request. (e) Frequency and cost To exercise rights (1) In general A covered entity— (A) shall comply with a verified request from any individual to exercise each of the rights described in subsections (b), (c), and (d) not less frequently than twice in any 12-month period