; (B) is made available at no additional cost and with no transactional penalty to the person; and (C) is in English and any other language in which the covered entity communicates with the person, as applicable. (2) Deadline to comply with request The Commission shall promulgate rules to establish deadlines for a covered entity to comply with a request under paragraph (1). 2417. Right to know (a) In general A person shall have the right to know what personal data a covered entity will collect and process about the person (including through a data processor), including the categories and specific pieces of personal data the covered entity processes, before giving consent for the collection and processing of the personal data of the user. (b) Meaningful notice (1) In general A covered entity shall make publicly available— (A) a current long-form privacy policy; (B) a current short-form privacy policy; and (C) all privacy policies that were previously in effect. (2) Requirements for privacy policies (A) In general A covered entity shall make each current privacy policy of the covered entity persistently and conspicuously available at or prior to— (i) the point of sale of, subscription to, or sign up for a product or service; or (ii) at or prior to the point of creation of an account with a platform owned or controlled by the covered entity. (B) Short-form privacy policy The short-form privacy policy required under paragraph (1) shall— (i) use plain language; and (ii) include— (I) the personal data being processed; (II) whether personal data will be processed for purposes of targeted advertisements or monetization