Purposes
Training foundation model. Fine-tuning. Personalization. Analytics. Each requires distinct consent under GDPR.
Advertisement
Consent quality
Freely given, specific, informed, unambiguous. Not buried in ToS. Withdrawable.
Advertisement
Opt-in vs opt-out
GDPR: opt-in. US mostly opt-out (CCPA opt-out from sale/share). Different flows per jurisdiction.
Withdrawal
Right to withdraw consent. Requires unlearning capability or excluding user from future training.