; (J) whether the operator collects covered information about teenagers or children over time and across different digital services if a teenager or child uses the operator’s digital service; (K) how a teenager or a parent of a child can exercise their rights to access, correct, and delete such teenager’s or child’s covered information as set forth in paragraph (6); (L) a listing of all possible consents that may be obtained by the operator for the processing of covered information, how a teenager or the parent of a child can grant, withhold, withdraw, or modify any such consent, and the consequences of withholding, withdrawing, or modifying any such consent; (M) the effective date of the privacy policy; and (N) how the operator will communicate material changes to the privacy policy to the teenager or the parent of a child. (3) Consent required (A) In general An operator of a children’s service shall— (i) provide clear and concise notice to a teenager or the parent of a child of the items of covered information about such teenager or child, respectively, that are processed by such operator and how such operator processes such covered information; (ii) obtain verifiable consent for such processing; and (iii) if such operator determines, including through actual or constructive knowledge, that such operator has not obtained verifiable consent for any specific processing of covered information about a teenager or child, not later than 48 hours after such determination— (I) obtain verifiable consent; or (II) delete all covered information about such teenager or child. (B) When consent not required Verifiable consent under this paragraph is not required in the case of— (i) online contact information collected from a teenager or child that— (I) is used only to respond directly on a one-time basis to a specific request from the teenager or child; (II) is not used to re-contact the teenager or child; and (III) is not retained by the operator after responding as described in subclause (I)