; or (2) in response to the user’s request for information or feedback. 2416. Rights of data subjects to access, correction, portability, and deletion (a) Access to and portability of personal data A person shall have the right to— (1) access all personal data of the person that is processed by a covered entity; (2) access all information pertaining to the collection and processing of the personal data of the person by a covered entity, including— (A) where, or from whom, the covered entity obtained the personal data, such as whether the personal data was obtained— (i) from the person or a third party; and (ii) online or offline; (B) the types of third parties to which the covered entity has disclosed or will disclose the personal data; (C) the purposes of the processing; (D) the categories of the personal data; (E) the names of third parties to which the covered entity has disclosed the personal data and a log showing when the disclosure occurred; and (F) the period of retention of the personal data; (3) obtain any personal data of the person that has been processed by a covered entity in a structured, readily usable, portable, and machine-readable format; (4) with respect to personal data of the person that is stored by a covered entity, transmit or cause the covered entity to transmit the personal data to another covered entity, where technically feasible; and (5) request that a covered entity stop collecting and processing the personal data of the person. (b) Correction and deletion of personal data A person shall have the right to— (1) correct inaccurate personal data of the person that is stored by a covered entity; and (2) delete all the personal data of the user that is stored by a covered entity. (c) Exercise of rights (1) In general A covered entity shall provide a person with a reasonable means to exercise the rights provided under subsections (a) and (b) in a request form that— (A) contains a clear and conspicuous disclosure of the rights