Opt-In Consent
What is Opt-In Consent?
A consent model requiring individuals to take an affirmative action to agree to data collection or processing before it occurs.
Terms that appear alongside opt-in consent
Each of these is named in at least one of the same controls as opt-in consent. The number is how many controls name both.
- consent 38 shared controls
- gdpr 12 shared controls
- biometric data 12 shared controls
- profiling 9 shared controls
- data subject 9 shared controls
- sensitive personal data 7 shared controls
- audit 6 shared controls
- geolocation data 6 shared controls
Frameworks that govern opt-in consent
What the standards actually require on opt-in consent
Requirements naming opt-in consent across 6 standards, quoted from the control text.
A business may offer payments, discounts or price or service differences tied to collecting, selling, sharing or keeping data, but only with a Notice of Financial Incentive (11 CCR 7016) that summarises the offer, its material terms, the data affected, how to...
ccpa-cpra::1798.125(b) · Offer financial incentives only with notice and opt-in consent →Controllers may not process sensitive data without the consumer's consent (or, for a known child, in accordance with COPPA).
CTDPA-42-520-SENSITIVE · Sensitive Data Opt-In Consent →Processing of sensitive data requires the controller to obtain freely given, specific, informed, unambiguous, opt-in consent from the consumer, or for known children process in accordance with COPPA.
WI-DPA-CON.1 · Opt-in consent for processing of sensitive data →A body must not charge for access where the individual shows that a provider refused a consumer credit application within the previous 90 days, even through an access seeker and regardless of free access in the past 3 months.
australia-privacy-credit-reporting-code-2025::19(4)-(7) · Give free access after a refusal within 90 days or a correction decision and once every 3 months, provide all credit information, derived information and the credit rating clearly with explanations, and make the free service as findable as any fee-based one →Present the principal with the choice whether to allow processing except where consent cannot freely be withheld or the law allows processing without it, the choice given freely, specifically and on a knowledgeable basis;
iso-iec-29100-2024::5.2 · 5.2 Consent and choice →Direct marketing + profiling + tracking technologies are subject to UU PDP consent + lawful basis requirements + Indonesian sectoral law overlays.
IDPdp-Marketing-Profiling-DirectCommunication-Art18-OptOut-PreferenceCenter-Cookies · Indonesia PDP Marketing + Profiling + Direct Communication + Article 18 Marketing Consent + Opt-Out + Preference Center + Cookies + Tracking Technologies + Behavioural Advertising →Questions people ask about opt-in consent
What is Opt-In Consent?
Why is Opt-In Consent important for compliance?
Which compliance frameworks address Opt-In Consent?
Where can I learn more about Opt-In Consent?
See how Opt-In Consent applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.