; (C) compliance with legal process or other purposes expressly authorized under specific legal authority; or (D) other purposes— (i) that are specified in a notice to the teen or parent of the child; and (ii) to which the teen or parent of the child has consented under paragraph (7) before the information is used or disclosed for such other purposes. (4) Retention limitation principle (A) In general The personal information of a child or teen should not be retained for longer than is necessary to fulfill a transaction or provide a service requested by the child or teen or such other purposes specified in subparagraphs (A) through (D) of paragraph (3). (B) Data disposal The operator should implement a reasonable and appropriate data disposal policy based on the nature and sensitivity of personal information described in subparagraph (A). (5) Security safeguards principle The personal information of a child or teen should be protected by reasonable and appropriate security safeguards against risks such as loss or unauthorized access, destruction, use, modification, or disclosure. (6) Transparency principle (A) General principle The operator should be transparent about developments, practices, and policies with respect to the personal information of a child or teen. (B) Provision of information The operator should provide to each parent of a child, or to each teen, using the website, online service, online application, mobile application, or connected device of the operator with a clear and prominent means— (i) to identify and contact the operator, by, at a minimum, disclosing, clearly and prominently, the identity of the operator and— (I) in the case of an operator who is an individual, the address of the principal residence (but not a personal residence) of the operator and an email address or online contact form and telephone number for the operator