Opt-outs across devices or services: one choice, many systems

A choice made in a browser may never reach the TV app. An objection logged in a CRM may not reach the notification service. A setting labelled as a single control may cover only part of the processing.

The California DOJ alleged that Disney's opt-outs did not reach all devices and services linked to an account. The Garante fined BBVA after app notifications continued despite an objection.

European decisions show the same gap. CNIL’s CALOGA decision covered withdrawal across its databases. The DPC’s EUR 403 million Google location decision concerned Web & App Activity, Location History and Location Accuracy; the case page draws the lesson that location controls need clear purposes, lawful processing and retention limits.

In the repository

• Map every store that holds a privacy choice and every system that should read it.
• Key choices to the account where one exists, not only to a device or cookie.
• Check retries and failures when a choice propagates.

In the browser and network

• Opt out on the web, then watch traffic from your apps on the same account.
• Test what each setting actually stops.

With the people responsible

• List every partner per platform and who forwards opt-outs to them.
• Document purpose-specific retention and deletion for each system.

4 cases in the library are tagged with this issue, newest first. Each page has the record, the source and its procedural status.

• Google Ireland: Location controls need clear purposes, lawful processing and retention limits. Irish Data Protection Commission (DPC) · Decision 21 September 2026 · Administrative fines and six-month compliance order; full decision not reviewed.
• BBVA Italy: Recording an opt-out is insufficient when the sending system never receives it. Italian Data Protection Authority (Garante) · Decision 3 July 2026 · Administrative fine and compliance order; later appeal status not established.
• Disney: Make an opt-out follow the account, not the device. California DOJ · Announced 11 February 2026 · Settlement and stipulated judgment.
• CALOGA: Buying leads did not remove the duty to verify consent and honour withdrawal. CNIL · Decision 15 May 2025 · Administrative fine; later appeal status not established.

The laws most often cited in these cases:

• CCPA: linked from 1 of the cases above

The sources for each case are on its case page. Read how to use the library.

Source review: 19 October 2026. This page groups the cases Inth has tagged with this issue and summarises each record at its procedural stage. An allegation is not a finding, and a settlement does not establish liability after trial. Tentative rulings are labelled and may change at the hearing. Inth assigns the issue labels and implementation checks. It is not legal advice. Inth wrote the technical checks; they cannot decide which laws apply or prove compliance.