; and (B) to the extent possible, if facial recognition technology is present, provides to the end user— (i) a concise notice that facial recognition technology is present, and, if contextually appropriate, where the end user can find more information about the use of facial recognition technology by the controller; and (ii) documentation that includes general information that explains the capabilities and limitations of the facial recognition technology in terms that end users are able to understand; (2) use the facial recognition technology to discriminate against an end user in violation of applicable Federal or State law; (3) repurpose facial recognition data for a purpose that is different from those presented to the end user under paragraph (1)(A); or (4) share the facial recognition data with an unaffiliated third party without affirmative consent that is separate from the affirmative consent required under paragraph (1)(A). (b) Consent (1) In general When obtaining affirmative consent, a controller shall make available to an end user a notice that describes the specific practices of the processor in terms that end users are able to understand regarding the collection, storage, and use of facial recognition data, including— (A) the reasonably foreseeable purposes, or examples, for which the processor collects and shares information derived from facial recognition technology or uses facial recognition technology; (B) the data retention and deidentification practices of the processor