# O3.21 Establish mechanisms to ensure a right to opt-out whenever appropriate

{% tabs %}
{% tab title="Principle" %}
O3 Ensure data privacy by design
{% endtab %}

{% tab title="Risks" %}
[Disempowerment](#risks)

[Weak rule of law](#risks)
{% endtab %}

{% tab title="Life Cycle Stage" %}
[Operations and Maintenance](#lifecycle-stages)
{% endtab %}
{% endtabs %}

## Practices

* Implement and enforce legal protections that allow individuals to opt out of DPI systems without losing access to essential services or societal participation, ensuring their privacy is safeguarded against both primary and secondary uses of their personal data.
* Conduct consultations with stakeholders and study international best practices to design robust opt-out mechanisms that comply with global data privacy standards.
* Regularly review and update regulations to address emerging privacy concerns, ensuring that opt-out mechanisms remain effective and relevant as technology evolves.

<table data-view="cards"><thead><tr><th></th><th></th><th></th></tr></thead><tbody><tr><td></td><td><a href="https://fpf.org/blog/survey-of-current-universal-opt-out-mechanisms/">Future of Privacy Forum (2023). Survey of Current Universal Opt-Out Mechanisms</a></td><td></td></tr><tr><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td></tr></tbody></table>