About this interactive
The Compliance, Privacy, and Data Roles lesson describes two approaches privacy laws take to marketing.
Opt-out: the company may contact the data subject and market to them until the person says they do not want it. Once they opt out, the company has to stop, and it may not use their data to market to them.
Consent: the company may not market to the person at all until the person says yes. Silence is not a yes. If the person later takes the yes back, the company has to stop.
So the same person, with the same history, can be fair game under one approach and off limits under the other. A customer who has never said anything may get the newsletter under an opt-out approach, but not under a consent approach.
A quick test for each card: under this approach, what has the person said, and does that open the door or close it?
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →