obtained by a covered entity. (b) Requirement A covered entity that receives a verifiable request to delete an individual's personal information pursuant to subsection (a)— (1) shall immediately cease processing such personal information, and as soon as practicable, permanently delete such information, except as provided under subsections (c), (d), and (e)