; and (D) information on the right of an individual to prohibit a covered entity or all covered entities from using a targeting service to deliver advertisements or other information to that individual based on that individual’s personal information under this section. (3) Timing Notice required under paragraph (1)(B) shall be provided by a targeting service at the time of each targeted communication with an individual by the targeting service on behalf of a covered entity that is based on the individual’s personal information. (4) Format Notice required under paragraph (1)(B) shall be provided in a concise and easily accessible form, using clear and plain language. (d) Confirmation A targeting service shall provide confirmation of an individual’s verifiable request to prohibit targeted communications from a covered entity or all covered entities based on that individual’s personal information not later than 3 days following receipt of a verifiable request from that individual pursuant to subsection (a). (e) Records (1) Targeting service A targeting service shall maintain adequate records of any individual’s request under subsection (a) and, if applicable, any written permission provided under subsection (b)(2) to ensure such individuals do not receive targeted communications from a covered entity unless such written permission is provided. (2) Covered entity A covered entity shall maintain records of all notices provided to a targeting service as required under subsection (c)(1)(A). (3) Review All records required under this subsection shall be reviewable by the Commission. (f) Rule of construction Nothing in this section shall be interpreted— (1) to prohibit a covered entity from using a targeting service to deliver information to an individual that is not based on that individual’s personal information