; or (B) the precise geolocation information of a device associated with an individual. (13) Store The term store means any operation or set of operations to continue possession of covered data, including by automated means. (14) Third party service provider The term third party service provider means any covered entity that collects, processes, stores, or discloses covered data at the direction of, and for the sole benefit of, another covered entity under a contract. (b) Modified definition by rulemaking If the Commission determines that a term defined in paragraph (10) or (12) is not sufficient to protect an individual’s data privacy, the Commission may promulgated regulations under section 553 of title 5, United States Code, to modify the definition as the Commission considers appropriate. 3. Required privacy notice (a) Privacy notice Each covered entity shall post in an accessible location a notice that is concise, in context, in easily understandable language, accurate, clear, timely, updated, uses visualizations where appropriate, conspicuous, and free of charge regarding the covered entity’s privacy practices. (b) Contents of notice The notice required by subsection (a) shall include— (1) a description of the covered data that the entity collects, processes, stores, and discloses, including the sources that provided the covered data if the covered entity did not collect the covered data from the individual; (2) the purposes for and means by which the entity collects, processes, and stores the covered data; (3) the persons and entities to whom, and purposes for which, the covered entity discloses the covered data