Opt-In / Opt-Out
Legal
Opt-in: processing only after the individual affirmatively agrees. Opt-out: processing is permitted until the individual objects. GDPR and CPRA sensitive-data provisions require opt-in for some uses; most U.S. comprehensive laws default to opt-out for sale/sharing.