by such regulated entity, the steps an individual is required to take to implement such controls, and direct links to such controls. (7) A concise statement describing the efforts of the regulated entity to protect personal reproductive or sexual health information from unauthorized disclosure. 5. Prohibition against retaliation A regulated entity may not retaliate against an individual because the individual exercises a right of the individual under this Act, including by— (1) denying goods or services to the individual