; (C) that is reasonably accessible and usable by consumers; and (D) that enables consumers to make use of the features described in subparagraph (A) through an Application Programming Interface; (2) as part of the implementation of the opt-out website described in paragraph (1)— (A) maintain a record of the opt-out status of consumers enrolled through the opt-out website, including the date and time when the consumer opted out; (B) enable consumers to convey their opt-out status to covered entities in 1 or more privacy-protecting ways through technological means determined by the Commission, such as through a consumer’s web browser or operating system; (C) enable covered entities to determine whether a particular consumer is enrolled in the opt-out website in a privacy-preserving way that does not result in the disclosure of any personal information other than a consumer’s opt-out status to that covered entity; and (D) enable covered entities to make use of the mechanism described in subparagraph (C) through an Application Programming Interface, for which the Commission may charge a reasonable fee to cover the costs of operating the opt-out registry and access to the system; (3) require that a covered entity be bound by the opt out of a consumer when the opt out is conveyed through the opt-out website implemented and maintained by the Commission— (A) immediately for new customers; and (B) within 30 days for existing customers or consumers who are not customers, unless, after the consumer has opted out in the manner described in paragraph (1)(A), the covered entity receives, in accordance with the procedures described in paragraph (10), consent from the consumer to not be bound by the consumer’s opt out; (4) require covered entities that store or use personal data on consumers with which they— (A) do not have a direct relationship