; (B) the manner in which the personal information is collected; (C) how and for what purpose the covered entity is collecting, using, retaining, sharing, or selling the personal information; (D) how long the personal information will be held; (E) which third parties the covered entity shares personal information with or leases or sells personal information to, not including— (i) a governmental entity with which the covered entity shares personal information pursuant to a court order or law that prohibits the covered entity from revealing that instance of sharing to the individual to whom the personal information pertains; (ii) a third party if the personal information is— (I) made available to and readily accessible by the general public with the consent of the individual to whom the personal information pertains; and (II) shared with, or leased or sold to, the third party through a mechanism available to any member of the general public; or (iii) a third party with which the covered entity shares, or to which the covered entity leases or sells, personal information of an individual that the covered entity did not obtain from the individual, if revealing that instance of sharing, leasing, or selling personal information would expose another individual to likely harm; (F) in the case of the sharing, leasing, or selling of personal information described in subparagraph (E) that is not excluded under clause (i), (ii), or (iii) of that subparagraph, what personal information is shared with or leased or sold to third parties and for what purpose; (G) how an individual can access, correct, and delete the personal information of the individual that the covered entity retains as required under section 6; (H) the practices of the covered entity for collecting personal information of an individual, including offline practices, when the individual is not directly interacting with the covered entity; (I) the practices of the covered entity for using personal information in automated decisionmaking