Skip to content

Opt-Out Right

What is Opt-Out Right?

The right of individuals to decline or withdraw consent for certain data processing activities, such as the sale of personal information.

Privacy and Data Protection

Terms that appear alongside opt-out right

Each of these is named in at least one of the same controls as opt-out right. The number is how many controls name both.

Frameworks that govern opt-out right

GDPRView framework →ISO 27001:2022View framework →

What the standards actually require on opt-out right

Requirements naming opt-out right across 6 standards, quoted from the control text.

Nebraska Data Privacy Act1 control

Provide consumer opt-out rights for: (a) processing personal data for targeted advertising, (b) sale of personal data (defined more narrowly than CCPA - exchange of personal data for monetary consideration), (c) profiling in furtherance of decisions that produ...

NDPA-3 · Opt-Out Rights for Targeted Advertising, Sale, and Profiling →
New Hampshire Data Privacy Act1 control

Provide consumer opt-out rights for: (a) targeted advertising, (b) sale of personal data, (c) profiling that produces legal or similarly significant effects.

NHPA-3 · Opt-Out Rights, UOOM, and Universal Opt-Out Mechanism →
New Jersey Data Privacy Act1 control

Provide opt-out rights for: (a) targeted advertising, (b) sale of personal data, (c) profiling that produces legal or similarly significant effects.

NJDPA-3 · Opt-Out Rights and Universal Opt-Out Mechanism (UOOM) →
Florida Digital Bill of Rights (FDBR)2 controls

Establishes consumer rights to access, delete, correct, and port personal data; includes opt-out rights

FDBR-705 · Consumer Rights (§501.705) →
Connecticut Data Privacy Act (CTDPA)1 control

Consumers may designate an authorized agent (including via technology) to exercise the opt-out right on their behalf.

CTDPA-42-518-AUTHAGENT · Authorized Agents →
Indiana Consumer Data Protection Act1 control

Indiana CDPA grants Indiana consumers six core rights subject to verifiable consumer request procedures per IC 24-15-3 and IC 24-15-4.

INCDPA-ConsumerRights-Access-Correction-Deletion-Portability-OptOut-TargetedAd-Sale-Profiling-Appeal-45Day · Indiana CDPA Consumer Rights - Access + Correction + Deletion + Portability + Opt-Out of Targeted Advertising/Sale/Profiling + 45-Day Response + 45-Day Extension + Authorised Agent + Appeal Process →

Questions people ask about opt-out right

What is Opt-Out Right?
The right of individuals to decline or withdraw consent for certain data processing activities, such as the sale of personal information.
Why is Opt-Out Right important for compliance?
Opt-Out Right is a key concept in Privacy and Data Protection. Understanding opt-out right helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Opt-Out Right?
Opt-Out Right appears in the requirement text of Nebraska Data Privacy Act, New Hampshire Data Privacy Act, New Jersey Data Privacy Act, Florida Digital Bill of Rights (FDBR), Connecticut Data Privacy Act (CTDPA). Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Opt-Out Right?
Explore our compliance framework pages to see how opt-out right applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Opt-Out Right applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.