In data protection, opt-in means active consent from the user to the processing of personal data, for example for cookies, newsletters or tracking tools.
Under the GDPR, clear and voluntary consent is required for many types of processing, especially marketing and Web analytics . This means that tracking scripts and non-essential cookies must not be used before the user has actively agreed.
A valid opt-in must:
- be given actively , for example by clicking a button,
- be informed , with a clear explanation of what happens,
- and at any time revocable .
A typical example is a cookie bannerin which the user agrees to specific purposes or providers.