Sec. 204. Right to consent and object
265 words·~1 min read·
/bill/117/hr/8152/ih/section-204·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity shall provide an individual with a clear and conspicuous, easy-to-execute means to withdraw any affirmative express consent previously provided by the individual that is as easy to execute by a reasonable individual as the means to provide consent, with respect to the processing or transfer of the covered data of the individual. A covered entity— shall not transfer the covered data of an individual to a third party if the individual objects to the transfer; and shall allow an individual to object to such transfer through an opt-out mechanism, as described in section 210, if applicable.
An individual may not opt out of the collection, processing, and transfer of covered data made pursuant to the exceptions in sections 101(b)(1) through
(11)of this Act. A covered entity that engages in targeted advertising shall— prior to engaging in such targeted advertising and at all times thereafter, provide an individual with a clear and conspicuous means to opt out of targeted advertising; abide by such opt-out designations by an individual; and allow an individual to prohibit such targeted advertising through an opt-out mechanism, as described in section 210, if applicable. A covered entity shall not condition, effectively condition, attempt to condition, or attempt to effectively condition the exercise of any individual rights under this section through— through the use of any false, fictitious, fraudulent, or materially misleading statement or representation; or the design, modification, or manipulation of any user interface with the purpose or substantial effect of obscuring, subverting, or impairing a reasonable individual’s autonomy, decision making, or choice to exercise any such rights.