Third party must be opt-in, but first party can be opt-out, that's why they do the alternate "opt-out opt-in" thing. In fact a lot of companies I've come acros

Third party must be opt-in, but first party can be opt-out, that's why they do the alternate "opt-out opt-in" thing. In fact a lot of companies I've come across do it this way, you see it on physical forms too.