; and (2) require or cause a person to disclose or circumvent the means described in paragraph (1) to the covered entity that would allow it to render the content intelligible. (f) Service providers safe harbor A service provider shall not be held liable for a violation of this section if such service provider is acting at the direction of and on behalf of a covered entity and has a reasonable belief that the covered entity’s directions are in compliance with this section. 208. Prohibition on discriminatory processing (a) Discrimination in economic opportunities A covered entity shall not process personal information or contents of communication for advertising, marketing, soliciting, offering, selling, leasing, licensing, renting, or otherwise commercially contracting for employment, finance, healthcare, credit, insurance, housing, or education opportunities in a manner that discriminates against or otherwise makes opportunities unavailable on the basis of an individual’s protected class status. (b) Public accommodations A covered entity shall not process personal information in a manner that segregates, discriminates in, or otherwise makes unavailable the goods, services, facilities, privileges, advantages, or accommodations of any place of public accommodation on the basis of a person’s or a group’s protected class status. (c) The Director shall promulgate regulations to implement this section. 209. Restrictions on genetic information (a) In general A covered entity may not collect, process, maintain, or disclose genetic information for any purpose other than— (1) providing medical treatment or testing to the individual whose genetic information is being collected, processed, maintained, or disclosed; (2) research and services related to medical, historical, or population uses of genetic information, if, in the case of disclosure of genetic information— (A) such genetic information is only disclosed to qualified research entities, as determined by the Director