II.2.a—Opt-Out Choice for Disclosure and New Purposes
>Control Description
An organization must offer individuals the opportunity to choose (i.e., opt out) whether their personal information is (i) to be disclosed to a third party or (ii) to be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals. Individuals must be provided with clear, conspicuous, and readily available mechanisms to exercise choice.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.