Are you referring to the fact that GDPR states that it has to be "opt-in" by default?