; or (II) using the covered information or online behavior of children or teenagers who share characteristics with such child or teenager or with the children or teenagers in such group, including income level or protected characteristics or proxies thereof; (iv) condition the participation of a child or teenager in a game, sweepstakes, or other contest on consenting to the processing of more covered information than is necessary for such child or teenager to participate; (v) engage in cross-device tracking of a child or teenager unless the child or teenager is logged in to a specific service, for the sole purpose of facilitating the primary purpose of the service or a specific feature thereof; (vi) engage in algorithmic processes that harmfully discriminate on the basis of race, age, gender, ability, or other protected characteristics; (vii) disclose biometric information, except to a service provider of the operator; (viii) disclose geolocation information, except to a service provider of the operator; or (ix) collect geolocation information by default or without disclosing clearly when geolocation tracking is in effect. (B) Exceptions Nothing in subparagraph (A) shall prohibit an operator from processing covered information if the processing of the covered information is necessary and done solely for the purposes of— (i) compliance with— (I) requirements to document compliance under this title; or (II) other laws, regulations, or legal obligations; (ii) preventing risks to the health or safety of a child or teenager or groups of children or teenagers