; and (ii) individuals may contact such data brokers at their own risk. (b) Centralized data deletion system (1) Establishment (A) In general Not later than 1 year after the date of enactment of this section, the Commission shall promulgate regulations to establish a centralized system that— (i) implements and maintains reasonable security procedures and practices (including administrative, physical, and technical safeguards) appropriate to the nature of the information and the purposes for which the personal information will be used, to protect individuals’ personal information from unauthorized use, disclosure, access, destruction, or modification; (ii) allows an individual, through a single submission, to request that every data broker who is registered under subsection (a) and who maintains any persistent identifiers (as described in subparagraph (B)(iii))— (I) delete any personal information related to such individual held by such data broker or affiliated legal entity of the data broker; and (II) unless otherwise specified by the individual, discontinue any present or future collection of personal information related to such individual