; or (ii) retaining, using, or disclosing the personal information for any purpose other than for the specific purpose of performing the services specified in the written contract. 352. Voter’s right of access (a) In general An individual shall have the right to direct a covered entity that obtains an individual’s personal information to disclose to that individual the categories of personal information and specific pieces of personal information the covered entity has obtained with respect to the individual. (b) Requirement A covered entity that receives a verifiable request from an individual to access that individual’s personal information pursuant to subsection (a), shall provide the requested information in accordance with subsection (e). (c) Verifiable request A covered entity shall provide the information specified in subsection (a) only upon receipt of a verifiable request. (d) Timing A covered entity shall comply with all verifiable requests made pursuant to subsection (a) within a reasonable period after receiving such a request, but not later than 10 calendar days after receiving such a request. (e) Contents Each request under subsection (a), with respect to the personal information of the requesting individual, shall include the following: (1) The categories of personal information obtained regarding that individual. (2) The specific sources from which the personal information was obtained. (3) The specific third party or third parties to whom the personal information has been transferred or disclosed. (4) The period for which the personal information will be stored by the covered entity. (5) The existence of the right of an individual to request a copy of that individual’s specific pieces of personal information under subsection (f). (6) The existence of the right of an individual to request erasure of that individual’s personal information under section 353. (7) The existence of the right to request prohibition of the transfer of personal information to any third party under section 354. (8)