O3.21 Establish mechanisms to ensure a right to opt-out whenever appropriate

Principle

O3 Ensure data privacy by design

Risks

Disempowerment

Weak rule of law

Life Cycle Stage

Operations and Maintenance

Practices

• Implement and enforce legal protections that allow individuals to opt out of DPI systems without losing access to essential services or societal participation, ensuring their privacy is safeguarded against both primary and secondary uses of their personal data.

• Conduct consultations with stakeholders and study international best practices to design robust opt-out mechanisms that comply with global data privacy standards.

• Regularly review and update regulations to address emerging privacy concerns, ensuring that opt-out mechanisms remain effective and relevant as technology evolves.

Future of Privacy Forum (2023). Survey of Current Universal Opt-Out Mechanisms