; and (2) have an output that is both uniform across the individuals that use the product or service and independent of a specific individual’s inherent or behavioral characteristics. (e) Usability The term usability as used in subsection (d) does not include optimizations or other alterations to the product or service that are made with the primary purpose of increasing the amount of time an individual engages with or uses the product or service, unless such increase benefits the individual. (f) Small businesses excluded This section does not apply to a small business. 107. Right to be informed A covered entity that collects personal information of an individual with whom such covered entity does not have an existing relationship (as of the time of the collecting), if such personal information includes contact information, shall notify such individual within 30 days, in writing if possible and at no charge to the individual, that such covered entity has collected the personal information of such individual. 108. Right to impermanence (a) Limitation on maintaining of personal information A covered entity shall not maintain personal information for more time than expressly consented to by an individual whose personal information is being maintained. (b) Consent A covered entity must obtain express affirmative consent from an individual before maintaining the personal information of such individual for any duration. Such consent may be obtained for categories of personal information and shall give an individual options to affirmatively choose granting a covered entity consent for various durations, at least including— (1) for no longer than needed to complete the specific request or transaction (including a reasonable estimate of such duration by the covered entity); (2) until consent is revoked