; (5) how individuals can exercise the individual rights described in this title; (6) a description of the covered entity’s data security policies; and (7) the effective date of the privacy policy. (c) Languages A covered entity shall make the privacy policy required under this section available to the public in all of the languages in which the covered entity provides a product or service or carries out any other activities to which the privacy policy relates. (d) Right To consent to material changes A covered entity shall not make a material change to its privacy policy or practices with respect to previously collected covered data that would weaken the privacy protections applicable to such data without first obtaining prior affirmative express consent from the individuals affected. The covered entity shall provide direct notification, where possible, regarding material changes to affected individuals, taking into account available technology and the nature of the relationship. 103. Right to delete A covered entity, upon the verified request of an individual, shall— (1) delete, or allow the individual to delete, any information in the covered data of the individual that is processed by the covered entity; and (2) inform any service provider or third party to which the covered entity transferred such data of the individual’s deletion request. 104. Right to correct inaccuracies A covered entity, upon the verified request of an individual, shall— (1) correct, or allow the individual to correct, inaccurate or incomplete information in the covered data of the individual that is processed by the covered entity