risks and security risks from the processing of covered information require a higher certainty of age assurance. (B) Age assurance The regulations promulgated under paragraph (1) shall require an operator to conduct an age assurance to determine the age of each specific user. (C) Approval of age assurance mechanisms The Commission shall establish in the regulations promulgated under paragraph (1) a process under which an operator may obtain the approval of the Commission of particular mechanisms of age assurance as meeting the age assurance requirements of such regulations for particular levels of privacy risks. (D) Data minimization The regulations required by paragraph (1) shall provide that any data collected for age assurance shall be the minimal amount necessary and destroyed immediately or as determined by the Commission, but consistent with standards that still allow for auditing and compliance. (c) Prohibition on certain advertising or marketing for digital services likely To be accessed by children or teenagers An operator of a digital service that is likely to be accessed by children or teenagers may not process covered information for the purpose of providing for targeted personalized advertising or engage in other marketing to a specific child or teenager or group of children or teenagers based on— (1) using the covered information, online behavior, or group identifiers of such child or teenager or of the children or teenagers in such group