; (ii) publicly commits to maintain and use the information in de-identified form and not to attempt to re-identify the information, except for the purpose of testing the sufficiency of the de-identification measures; and (iii) contractually obligates any entity to which the covered entity discloses the information to comply with clauses (i) and (ii). (B) Re-identify The term re-identify means to link information that has been de-identified to a specific teenager or child or specific consumer device of a teenager or child. (15) State The term State means each of the several States, the District of Columbia, each territory of the United States, and each federally recognized Indian Tribe. (16) Service provider The term service provider means a covered entity that— (A) processes covered information at the direction of, and for the sole benefit of, another covered entity; and (B) is contractually or legally prohibited from processing such covered information for any other purpose. (17) Digital service The term digital service means a website, online service, online application, mobile application, or any other service that processes covered information digitally. (18) Children’s service The term children’s service means— (A) a digital service or portion thereof that is directed to children; or (B) any other digital service or portion thereof, if the operator of the service decides to treat all users of the service or portion, as the case may be, as children. (19) Privacy risk The term privacy risk means potential adverse consequences to an individual, group of individuals, or society arising from the processing of covered information, including— (A) physical harm; (B) psychological or emotional harm; (C) negative or harmful outcomes or decisions with respect to an individual’s eligibility for rights, benefits, or opportunities; (D) reputational and dignity harm; (E) financial harm, including price discrimination; (F) inconvenience or expenditure of time