; (9) by redesignating paragraphs (11) and (12) as paragraphs (12) and (13), respectively; and (10) by adding at the end the following: (14) Process The term process means any operation or set of operations which is performed on covered information, whether or not by automated means, including collecting, creating, acquiring, disclosing, recording, deriving, inferring, obtaining, assembling, organizing, structuring, storing, retaining, adapting or altering, using, or retrieving covered information. (15) De-identified information and related terms (A) The term de-identified information means information that has been de-identified by a covered entity, where the covered entity publicly discloses the methods it uses to de-identify information. (B) The term de-identify means the removal of identifying information from information such that the information is not reasonably linkable to a specific young consumer or child or consumer device of a young consumer or child. (C) The term re-identify means to link information that has been de-identified to a specific young consumer or child or consumer device of a young consumer or child. (16) State The term State means each of the several States, the District of Columbia, each territory of the United States, and each federally recognized Indian Tribe. (17) Service provider The term service provider means a covered entity that processes covered information at the direction of, and for the sole benefit of, another covered entity, and— (A) is contractually or legally prohibited from processing such covered information for any other purpose; and (B) complies with all of the requirements of this Act. . 3. Unfair or deceptive acts or practices Section 1303 of the Children’s Online Privacy Protection Act of 1998 ( 15 U.S.C. 6502 ) is amended— (1) in the section heading, by striking collection and use of personal information from and about children on the internet and inserting processing of covered information from and about young consumers or children