; and (ii) who— (I) collects or maintains, either directly or through a service provider, personal information from or about the users of that website, service, application, or connected device; (II) allows another person to collect personal information directly from users of that website, service, application, or connected device (in which case, the operator is deemed to have collected the information); or (III) allows users of that website, service, application, or connected device to publicly disclose personal information (in which case, the operator is deemed to have collected the information); and (B) does not include any nonprofit entity that would otherwise be exempt from coverage under section 5 of the Federal Trade Commission Act ( 15 U.S.C. 45 ). ; (2) in paragraph (4)— (A) by amending subparagraph (A) to read as follows: (A) the release of personal information collected from a child or teen for any purpose, except where the personal information is provided to a person other than an operator who— (i) provides support for the internal operations of the website, online service, online application, mobile application, or connected device of the operator, excluding any activity relating to targeted marketing directed to children, teens, or connected devices; and (ii) does not disclose or use that personal information for any other purpose; and ; and (B) in subparagraph (B)— (i) by inserting or teen after child each place the term appears; (ii) by inserting or teens after children ; and (iii) by striking website or online service and inserting website, online service, online application, mobile application, or connected device ; (3) in paragraph (8), by striking subparagraphs (F) and (G) and inserting the following: (F) geolocation information; (G) information generated from the measurement or technological processing of an individual's biological, physical, or physiological characteristics, including— (i) fingerprints; (ii) voice prints; (iii) iris or retina imagery scans; (iv) facial imagery or templates