With the advent of data protection laws such as GDPR and CCPA, the concept of opt-in and opt-out has gained importance in recent years. We cannot collect, transfer, or use people's data without their opt-in, except for other legal reasons. EmailsAndSurveys will discuss what opt-in and opt-out mean, and when and how to use them to process your data.
What is opt-in?
It is the positive act of giving or requesting the users opt-in. You should be familiar with websites that use checkboxes to allow users to accept the terms. This is an example of a subscription. Users can register their opt-in to the request by checking the box. In an opt-in model, user data cannot be collected or used until users give their opt-in.
Examples of opt-in
- Activation is obtained for various purposes, such as subscription to the newsletter, acceptance of the terms, permission to store user data, opt-in to the use of cookies, etc.
- A typical example is checkboxes on forms. Companies ask users for permission to share or use form data for purposes such as email marketing or advertising.
There are often many requirements associated with agreeing to participate. Opt-in is only valid if the following conditions are met:
- Freely Provided: Users are not forced to opt-in through the use of misleading terms or deceptive design or user interfaces.
- Informed: Users were informed about how their data would be used when they gave their opt-in.
- Specifically: Opt-in for different purposes for the collection of personal data is not grouped as a single opt-in but requires separate opt-in from users.
- Unambiguous: Users had an explicit way to indicate their opt-in, for example by checking a box or clicking a button.
- Laws such as GDPR and LGPD follow the principle of voluntary opt-in when processing personal data.
What is Opt-out?
The meaning of opt-out is to deny permission. In other words, it is the act of refusing or withdrawing opt-in in response to a specific event or process. The opt-out model assumes that the user’s opt-in to the collection or use of their data. They can prevent this by deselecting the option.
US laws such as CPRA and VCDPA follow an opt-out approach.
Example of opt-out.
Do not subscribe to the newsletter, do not uncheck a previously selected box, do not opt-in to the storage of personal data, refuse the use of cookies, etc. For example, Companies add an unsubscribe link at the end of their emails so that users can opt out of receiving emails. When users click on the link, their emails will be removed from the company's email marketing list.