In General. Entities should provide Consumers choice with respect to the transfer of Personally Identifiable Data to Non-Affiliated third parties for Marketing purposes.
Entities should honor a Consumer’s choice regarding use of, access to, or sharing of Personally Identifiable Data made in accordance with the entity’s stated policy. If the entity has promised to honor the Consumer’s choice for a specific time period, and if that time period subsequently expires, then the entity should provide that Consumer with a new notice and opportunity for choice.
Timing. All opt-out requests must be honored promptly.
Where choice is required, entities should provide choice through one of the following channels: online, application, mail, or telephone.
An entity that combines Consumer data with Digital Identifiers for Marketing on Non-Affiliated digital properties should provide Consumers with choice with respect to such practice by that entity.
An entity that collects data via a Connected Device should provide Consumers choice with respect to the transfer of such data to Non-Affiliated third parties for Marketing.
