What is an AI Opt-Out Mechanism?

Definition

An opt-out mechanism lets a person decline purely automated processing and still receive service where the law requires it. Privacy style ADM rules often pair this with clear instructions and a path that does not bury the choice.

See also our AI compliance glossary for short definitions of common terms.

Which regulations require this

• CCPA/CPRA Automated Decision-Making Technology Regulations

  California's ADMT regulations require businesses using automated decisionmaking technology for significant decisions...

  CAPrivacy ADMHighEnacted (pending)
• Colorado Privacy Act (CPA profiling and ADM)

  Colorado profiling rules define three tiers: Solely Automated Processing, Human Reviewed Automated Processing, and Hu...

  COPrivacy ADMHighIn effect
• Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments

  Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000...

  CTPrivacy ADMHighUpcoming
• Maryland Online Data Privacy Act (MODPA), ADM and profiling provisions

  Statute effective October 1, 2025, but enforcement does not begin until April 1, 2026. The law does not apply to proc...

  MDPrivacy ADMMediumIn effect
• Minnesota Consumer Data Privacy Act - ADM and profiling provisions

  Minnesota is the first state privacy law to require controllers to create and maintain a data inventory. The right to...

  MNPrivacy ADMMediumIn effect
• Rhode Island Data Transparency and Privacy Protection Act - ADM provisions

  Rhode Island's privacy framework includes consumer rights tied to profiling and automated decisions, including opt-ou...

  RIPrivacy ADMMediumIn effect
• Virginia Consumer Data Protection Act (VCDPA, Profiling Provisions)

  Grants Virginia consumers the right to opt out of profiling in furtherance of decisions that produce legal or signifi...

  VAPrivacy ADMMediumIn effect
• New Hampshire Privacy Act - Profiling Provisions

  Grants New Hampshire consumers the right to opt out of profiling for decisions with legal or significant effects.

  NHPrivacy ADMMediumIn effect
• New Jersey Data Privacy Act (Profiling Provisions)

  Uniquely covers nonprofits with no revenue threshold. Universal opt-out mechanism (UOOM) requirement effective July 1...

  NJPrivacy ADMMediumIn effect
• Nebraska Data Privacy Act - ADM and profiling provisions

  Nebraska requires consumer opt-out rights and risk assessments for qualifying profiling and automated decisions with...

  NEPrivacy ADMMediumIn effect
• Texas Data Privacy and Security Act, Profiling Provisions (HB 4)

  Texas comprehensive privacy law with profiling provisions. Requires data protection assessments for profiling that pr...

  TXPrivacy ADMLowIn effect
• Indiana Consumer Data Protection Act - Profiling Provisions

  Grants Indiana consumers the right to opt out of profiling for decisions with legal or significant effects. Applies t...

  INPrivacy ADMLowIn effect
• Montana Consumer Data Privacy Act - Profiling Provisions

  Grants Montana consumers the right to opt out of profiling for decisions with legal or significant effects. 2025 amen...

  MTPrivacy ADMLowIn effect
• Oregon Consumer Privacy Act - Profiling Provisions

  Grants Oregon consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out li...

  ORPrivacy ADMLowIn effect
• Tennessee Information Protection Act - Profiling Provisions

  Grants Tennessee consumers the right to opt out of profiling for decisions with legal or significant effects. First s...

  TNPrivacy ADMLowIn effect
• Delaware Personal Data Privacy Act - Profiling Provisions

  Grants Delaware consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out...

  DEPrivacy ADMLowIn effect
• Kentucky Consumer Data Protection Act - Profiling Provisions

  Grants Kentucky consumers the right to opt out of profiling for decisions producing legal or significant effects. Vir...

  KYPrivacy ADMLowIn effect
• Utah Consumer Privacy Act, Profiling Provisions (SB 227)

  Utah's comprehensive privacy law. It is the least restrictive state privacy law regarding profiling and ADM among com...

  UTPrivacy ADMLowIn effect

Which states reference this obligation

What you should do next

• Check which states give opt-out rights for profiling or automated decisions you run.
• Offer a conspicuous link or flow that works on mobile and desktop.
• Train frontline teams on how to honor opt-out signals without friction.
• Log consent, timing, and fulfillment so you can respond to an inquiry quickly.
• Retest the flow after you change vendors, models, or data feeds.