Opt-in
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
Opt-in - An affirmative indication of choice through an express act; failure to answer means the information is NOT used or shared.
In the CIPP/US body of knowledge, Opt-in comes up under Chapter 2: U.S. Legal Framework.
Opt-in in context
- ==Notice== describes information practices; ==choice== lets individuals control collection/use - ==opt-in is an affirmative yes==, ==opt-out implies consent unless the person objects==; ==access== lets individuals view their data. (Notice, Choice, and Access (Opt-In vs. Opt-Out))
- The FTC says ==express affirmative consent (opt-in)== is needed before material retroactive changes - and a material change at minimum includes sharing data with third parties after promising not to. (Drafting, Updating, and Versioning the Privacy Policy)
- laws differ on consent: ==opt-in== (COPPA parental consent, HIPAA PHI disclosure, FCRA credit report release); ==opt-out== (GLBA third-party transfers, VPPA, CAN-SPAM, Do Not Call); and ==no option== for commonly accepted practices like order fulfillment. (Opt-In, Opt-Out, and No Option)
Where Opt-in is covered in the CIPP/US study notes
Related terms
- Notice
- Choice
- Opt-out
- Access
Test yourself on Opt-in
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.