If so, the operator also must disclose the kinds of businesses in which the third parties are engaged; the general purposes for which the information is used; whether the third parties have agreed to maintain the confidentiality and security of the information; and that the parent has the option to agree to the collection and use of the child???s information without consenting to the disclosure of