; (ii) is solely engaged in the business of internet safety; (iii) will use any user data obtained under subsection (a) solely for the purpose of protecting a child from harm; (iv) will only disclose user data obtained under subsection (a) as permitted by subsection (f); and (v) will disclose, in an easy-to-understand, human-readable format, to each child with respect to whose account with a large social media platform the service of the third-party safety software provider is operating and (if a parent or legal guardian of the child made the delegation under subsection (a) with respect to the account) to the parent or legal guardian, sufficient information detailing the operation of the service and what information the third-party safety software provider is collecting to enable such child and (if applicable) such parent or legal guardian to make informed decisions regarding the use of the service. (B) Notification of changes Not later than 30 days after the date on which there is a change to an affirmation made under subparagraph (A) by a third-party safety software provider that is registered under such subparagraph, the provider shall notify the following about such change: (i) The Commission. (ii) Each child with respect to whose account with a large social media platform the service of the third-party safety software provider is operating and (if a parent or legal guardian of the child made the delegation under subsection (a) with respect to the account) the parent or legal guardian. (C) Deregistration by Commission The Commission shall establish a process to deregister a third-party safety software provider that the Commission determines— (i) has violated or misrepresented the affirmations made under subparagraph (A)