; (I) the practices of the covered entity for using personal information in automated decisionmaking; and (J) the right of an individual to provide opt-in approval and revoke approval consistent with section 5; (2) ensure that the short-form notice developed under paragraph (1)— (A) is clear, concise, well-organized, understandably written, and complete; (B) does not contain unrelated, confusing, or contradictory materials; and (C) is in a format that is— (i) prominent and easily accessible; (ii) of reasonable length; and (iii) clearly distinguishable from other matters; (3) not later than 15 days after making a material change to the privacy practices or policies of the covered entity, update the short-form notice developed under paragraph (1); (4) make the short-form notice required under paragraph (1) persistently and conspicuously available— (A) on the website or mobile application of the covered entity, if the covered entity maintains a website or mobile application; and (B) at the physical place of business or any other offline equivalent maintained by the covered entity; and (5) ensure that the short-form notice required under paragraph (1) is made available to an individual— (A) (i) at the point of sale of a product or service of, subscription to a service of, or establishment of an account with, the covered entity, prior to the sale, subscription, or establishment, whether that point of sale, subscription, or establishment is in person, online, over the telephone, or through another means; or (ii) if there is no such sale, subscription, or establishment, before the individual uses the product or service of the covered entity