// THREAT DETECTION AND DATA PRIVACY TERM

Opt Out

Opt out refers to the action a user takes to explicitly withdraw their consent for a company to collect, use, or share their personal data. It operates on a default-in model, meaning data is collected unless the user actively says no.

Opt Out — illustration from Wikipedia
Image via Wikipedia

TECHNICAL DEFINITION

Opt-out is a data privacy consent mechanism where a data subject must actively object to or withdraw permission for a data controller's processing of their personal information, often for purposes like direct marketing or third-party data sharing under regulations like CCPA/CPRA.

BACKGROUND

The Cyber Resilience Act (CRA) is an EU regulation for improving cybersecurity and cyber resilience, through common cybersecurity standards for products that have digital elements. For example, it requires incident reports and automatic security updates. Digital elements are, mainly, hardware and software whose "intended and foreseeable use includes direct or indirect data connection to a device or network".

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • unsubscribe
  • withdraw consent
  • object to processing
  • decline
  • Do Not Sell My Information
  • reject

USAGE NOTE

In privacy frameworks, 'opt-out' models are generally considered less protective of user privacy than 'opt-in' models, which require proactive consent.

DEVELOPERS

Organizations developing technology related to Opt Out.

  • OneTrust

    A leading privacy management software platform that helps organizations operationalize compliance with global privacy laws. Their technology automates the process for consumers to exercise their data rights, including opting out of data sales, targeted advertising, and marketing communications.

  • Securiti.ai

    Provides a 'Data Command Center' platform that unifies data controls across security, privacy, and governance. Their technology automates the fulfillment of Data Subject Requests (DSRs), such as the right to opt-out, required by laws like GDPR and CCPA.

  • Transcend

    A data privacy infrastructure company that provides tools to automate the handling of user data privacy requests. Their platform helps businesses programmatically fulfill opt-out, access, and deletion requests across their entire data stack, ensuring compliance.

  • TrustArc

    A company providing technology and services for privacy management and compliance. Their platform helps businesses manage consent, data inventory, and automate responses to individual rights requests, including opt-out choices under various regulations.

  • DeleteMe

    A hands-on subscription service that finds and removes a user's personal information from data broker websites. They use proprietary technology to scan for and manage the complex, continuous process of submitting opt-out requests on behalf of their customers.

  • Brave Software

    The developer of the Brave web browser, which is built with a focus on privacy. The browser automatically blocks online ads and website trackers and is a key supporter and implementer of the Global Privacy Control (GPC) signal, a technical standard designed to automatically communicate a user's opt-out preference.

  • Sourcepoint

    A consent management platform (CMP) that helps digital publishers and brands manage user privacy choices. Their technology provides tools for websites and apps to obtain, store, and signal user consent and opt-out preferences in compliance with regulations like GDPR and CCPA.

RELATED TERMS IN COMPLIANCE & PRIVACY