Opt-In Consent
What is Opt-In Consent?
A consent model requiring individuals to take an affirmative action to agree to data collection or processing before it occurs.
Terms that appear alongside opt-in consent
Each of these is named in at least one of the same controls as opt-in consent. The number is how many controls name both.
- consent 38 shared controls
- gdpr 12 shared controls
- biometric data 12 shared controls
- profiling 9 shared controls
- data subject 9 shared controls
- sensitive personal data 7 shared controls
- audit 6 shared controls
- geolocation data 6 shared controls
Frameworks that govern opt-in consent
What the standards actually require on opt-in consent
Requirements naming opt-in consent across 6 standards, quoted from the control text.
A controller may not process sensitive personal data without obtaining the consumer's freely given, specific, informed, and unambiguous consent.
TDPSA-541-053-SENSITIVE · Sensitive Data Opt-In Consent →Controllers must not process sensitive data without obtaining the consumer's freely given, specific, informed and unambiguous consent (opt in). Sensitive data of a known child must be processed in accordance with COPPA.
VCDPA-59-1-578-SENSITIVE-OPTIN · Sensitive Data Opt In Consent →Controllers may not process sensitive data without the consumer's consent (or, for a known child, in accordance with COPPA).
CTDPA-42-520-SENSITIVE · Sensitive Data Opt-In Consent →Obtain affirmative opt-in consent before processing sensitive data including racial or ethnic origin + religious beliefs + mental or physical health diagnosis + sexual orientation + citizenship or immigration status + genetic or biometric data processed for un...
NHPA-4 · Sensitive Data, Children, and Minors 13-16 Opt-In Consent →Processing of sensitive data requires the controller to obtain freely given, specific, informed, unambiguous, opt-in consent from the consumer, or for known children process in accordance with COPPA.
WI-DPA-CON.1 · Opt-in consent for processing of sensitive data →Consumers have the right, at any time, to direct a business that sells or shares PI about the consumer to third parties to stop selling or sharing the consumer's PI.
§1798.120 · Right to Opt Out of Sale or Sharing of Personal Information →Questions people ask about opt-in consent
What is Opt-In Consent?
Why is Opt-In Consent important for compliance?
Which compliance frameworks address Opt-In Consent?
Where can I learn more about Opt-In Consent?
See how Opt-In Consent applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.