GDPR - update opt outs