; (D) secondary uses outside of the primary purpose of the service as initially indicated when consent was first obtained; (E) a process to permit a withdrawal of consent to ensure that a user is able to remove consent for the terms of service for use of the consumer device, service, application, or software, including the collection and use of personal health data as easily as the user is able to give such consent; (F) providing a right to access a copy of the personal health data that the operator has collected, analyzed, or used, free of charge and in an electronic and easily accessible format, including a list of each entity that received the personal health data from the operator, whether through sale or other means