; and (B) may be presented differently depending on the interface or type of device on which the statement is being accessed by the user. (2) Location of summary statement and graphic data flow diagram The summary statement described in subsection (a)(1) shall be placed at the top of the permanent terms of service page of the covered entity, and the graphic data flow diagram described in subsection (a)(2) shall be located immediately below such summary statement. (3) Contents of summary statement The summary statement described in subsection (a)(1) shall include the following: (A) The categories of sensitive information that the covered entity processes. (B) The sensitive information that is required for the basic functioning of the service and what sensitive information is needed for additional features and future feature development. (C) A summary of the legal liabilities of a user and any rights transferred from the user to the covered entity, such as mandatory arbitration, class action waiver, any licensing or sale by the covered entity of the content of the user, and any waiver of moral rights. (D) Historical versions of the terms of service and change logs. (E) If the covered entity provides user deletion services, directions for how the user can delete sensitive information or discontinue the use of sensitive information. (F) A list of data breaches from the previous 3 years reported to consumers under existing Federal and State laws. (G) The effort required by a user to read the entire terms of service text, such as through the total word count and approximate time to read the statement. (H) Any other information the Commission determines to be necessary if that information is included in the terms of service by the covered entity. (4) Additional information required by the Commission In the rule issued under subsection (a), the Commission shall include a list of other information the Commission determines to be necessary under paragraph (3)(H). (d) Guidance on graphic data flow diagrams Not later than