; (B) how the data are being collected; (C) where and when the data are being collected; (D) the frequency of the collection; (E) where the storage of the data is located; (F) the business purposes for which the data are being used; and (G) as applicable, the identity of any third party or service provider— (i) used for such workplace surveillance; (ii) to which data from such workplace surveillance is transferred; and (iii) from which data of the covered individual is or may be purchased or acquired; and (2) how such workplace surveillance affects employment-related decisions by the employer, including with regard to the assessment of the performance and productivity of the covered individual. (b) Timing of disclosure (1) Initial disclosure An employer shall provide the disclosure required under subsection (a)— (A) in the case of— (i) a covered individual for whom an employment-related decision with regard to the hiring of the covered individual was made on or after the effective date of this section, to the covered individual not later than 30 days after the date on which the employer makes such employment-related decision; or (ii) a covered individual who is employed by, or otherwise performing work for remuneration for, the employer on such effective date or a covered individual for whom an employment-related decision with regard to the hiring of the covered individual was made on or after the date that is 5 years prior to the effective date of this section but before such effective date, to the covered individual not later than 60 days after such effective date