Data Brokers' and AI Firms' Opt-Out Forms Are Built to Fail, Report Finds

Researchers found no accessible opt-out process without logging in on Meta, X, OpenAI, and Tinder. HireVue and DataTrust limited opt-out instructions to California residents despite additional state opt-out laws. Palantir provided a privacy form but lacked an option to opt out of sale or sharing of personal data, and researchers could not locate opt-out processes on Palantir, Meta, X, OpenAI, or Tinder without login. Similar issues were documented for TikTok, Amazon, and SoundThinking. Amazon disputed the findings, saying it does not sell personal information and that opt-out is handled by default through advertising choices pages and device settings. OpenAI said it does not sell user data, but shares limited data with marketing partners for targeted advertising and offers controls in-app and via a privacy portal.

"EPIC's researchers were unable to locate an opt-out process at all on Meta, X, OpenAI, and Tinder without first logging in. And HireVue and the surveillance vendor DataTrust frame their opt-out instructions as available only to California residents, even though 20 other states have passed laws granting opt-out rights."

"Palantir, the defense and intelligence contractor, provides a privacy form on its website but does not include an option to opt out of the sale or sharing of personal data-the same finding EPIC documented for TikTok, Amazon, and the gunfire-detection vendor SoundThinking. Palantir also does not clearly link the form from its homepage or its privacy policy, and the researchers were unable to locate any opt-out process on Palantir's site, Meta, X, OpenAI, or Tinder without logging in first."

"Adam Montgomery, a company spokesperson, says that Amazon does not sell customer personal information, and therefore customers are opted out by default. Opt-out options for data sharing are available through its " Your Ads Privacy Choices" and " Advertising Preferences " pages, and through privacy settings on most Amazon devices. Montgomery says Amazon does not use the word "share" in its opt-out options, but said the options cover the same uses defined by applicable law."

"Shane Bauer, a spokesperson for OpenAI, says the company does not sell user data, though it does acknowledge sharing limited data with marketing partners for targeted and cross-context behavioral advertising. "We give people straightforward ways to control how their data is used directly in our apps, so those choices are easy to make right where people are using our services," Bauer says. "Our Privacy Portal is another way for people to submit privacy requests, including individuals who don't have an OpenAI account but still want to exercise their privacy rights.""

Read at WIRED