; (2) detecting, responding to, or preventing security incidents or threats; (3) providing services to assist in the drafting or creation of the content of a communication; (4) processing expressly requested by the sender or intended recipient, if the sender or intended recipient can terminate such processing using a reasonable mechanism; (5) disclosing otherwise required by law; (6) filtering a communication where primary purpose of the communication is the commercial advertisement or promotion of a commercial product or service of a covered entity; or (7) detecting or enforcing an abuse or violation of the terms of service of the covered entity that would result in either a temporary or permanent ban from using the service. (b) Intended recipient A covered entity is not considered an intended recipient of a communication, or any communication used in the creation of the content of said communication, where— (1) at least one intended recipient is a natural person other than an employee or contractor of the covered entity; (2) at least one intended recipient is a person other than the covered entity