; and (2) that— (A) has an estimated Herfindahl-Hirschman Index of 2,000 or greater; (B) has 3 or fewer covered entities offering products and services in such category; or (C) the Director otherwise determines that a category would benefit from encouraging increased competition. 105. Right to human review of automated decisions For any decision by a covered entity based solely on automated processing of personal information of an individual, if such processing materially increases reasonably foreseeable significant privacy harms for such individual, such covered entity shall— (1) inform such individual of what personal information is being or may be used for such decision; (2) make available a reasonable mechanism by which such individual may request human review of such decision, upon request or in a publicly accessible location; and (3) if such individual requests such a review, conduct such review within a reasonable amount of time after such request. 106. Right to individual autonomy (a) In general A covered entity shall not collect, process, maintain, or disclose an individual’s personal information to— (1) create, improve upon, or maintain; (2) process with; or (3) otherwise link an individual with