; and (ii) such data that the covered entity inferred about the individual; and (B) a list of the specific third parties to which the covered entity has disclosed any health data or location data relating to such individual. (2) Format A covered entity shall make the information described in paragraph (1) available in both a human-readable and a structured, interoperable, and machine-readable format. (b) Right of deletion A covered entity shall make available a reasonable mechanism by which an individual, upon verified request, may request the deletion of any health data or location data relating to such individual that is retained by the covered entity, including any such information that the covered entity collected from a third party or inferred from other information retained by the covered entity. (c) Requirements for access and deletion (1) Timeline for complying with requests A covered entity shall comply with a verified request received under this section without undue delay, but not later than 15 days after the date on which the covered entity receives such verified request. (2) Fees prohibited A covered entity may not charge a fee to an individual for a request made under this section. (3) Rules of construction Nothing in this section shall be construed to require a covered entity to— (A) take an action that would convert information that is not health data or location data into health data or location data; (B) collect or retain health data or location data that the covered entity would not otherwise collect or retain; or (C) retain health data or location data longer than the covered entity would otherwise retain such data. (d) Reasonable mechanism defined In this section, the term reasonable mechanism means, with respect to a covered entity and a right under this section, a mechanism that— (1) is equivalent in availability and ease of use to that of other mechanisms for communicating or interacting with the covered entity