; or (II) other laws, regulations, or legal obligations; (ii) preventing risks to the health or safety of a child or teenager or groups of children or teenagers; or (iii) repairing errors that impair the existing (as of the time when the repairs are made) functionality of the children’s service. (5) Limitation on disclosing covered information to third parties (A) Disclosures Subject to the exceptions provided in subparagraph (C), an operator of a children’s service may not disclose covered information to a third party unless the operator has a written agreement with such third party that— (i) specifies all of the purposes for which the third party may process the covered information for which the operator has verifiable consent; (ii) prohibits the third party from processing covered information for any purpose other than the purposes specified under clause (i); and (iii) requires the third party to provide at least the same level of privacy and security protections as the operator. (B) Responsibilities of operators regarding third parties An operator of a children’s service— (i) shall perform reasonable due diligence in selecting any third party with which to enter into an agreement described in subparagraph (A) and shall exercise reasonable oversight over all such third parties to assure compliance with the requirements of this title and the regulations promulgated under this title; and (ii) if the operator has actual or constructive knowledge that a third party has violated an agreement described in subparagraph (A), shall— (I) to the extent practicable, promptly take steps to ensure compliance with such agreement; and (II) promptly report to the Commission that such a violation occurred. (C) Exceptions An operator of a children’s service may disclose covered information to a third party other than under an agreement described in subparagraph (A) if such disclosure is necessary and done solely for the purposes of— (i) compliance with— (I) requirements to document compliance under this title