; (B) is performed by the covered entity (or by a service provider at the direction of the covered entity) and is not disclosed to any third party; (C) is broadly compatible with the purposes for which the data was originally collected or processed; and (D) adheres to all applicable ethics and privacy laws. (6) Operational purposes To— (A) perform internal operations or analytics for a product or service offered by the covered entity or service provider, such as billing, shipping, internal systems maintenance, diagnostics, inventory management, financial reporting or accounting, serving an internet website, or network management; (B) use on a short-term, transient basis, provided that the personal data— (i) is not disclosed to a third party; and (ii) is not used to build a persistent profile of the individual; (C) in the case of a covered entity only, market or advertise a service or product to an individual if the personal data used for the marketing or advertising was collected directly from the individual by the covered entity or by a service provider on behalf of the covered entity; (D) improve a product, service, or activity used, requested, or authorized by the individual, including analytics, forecasting, the repair of errors that impair existing intended functionality, actions to verify or maintain quality or safety of the product, service, or activity, or the ongoing provision of customer service and support by the covered entity or service provider