@gwire opened this Issue on May 22nd 2018

When we added the opt-out iframe in the past we received a complaint that we were asserting consent where no consent had been given. This was due to the message in the opt out frame defaulting to "You are currently opted in." the first time it is displayed (before the user has had a chance to opt out).

While the wording doesn't have any impact in how we actually regard the data collection, it is now more important to communicate that we do not regard a lack of response as positive consent. (e.g. GDPR section 32 states "Silence, pre-ticked boxes or inactivity should not therefore constitute consent.")

Therefore I feel that is it safer to express the status (in english) as "not opted out" rather than "opted in".

      'YouAreOptedIn' => 'You are not currently opted out.',

Related #12810

@tsteur commented on May 22nd 2018 Member

Sounds better 👍

I wonder: When someone opts out, but later basically opts in again, would it require another message like "You opted in"?

@electric-paper commented on July 20th 2018

I have created a pull request. This changes the current YouAreOptedIn into the text given here.

Powered by GitHub Issue Mirror