<?xml version='1.0' encoding='utf-8'?>
<section article="gcl" article_name="Commercial Law" number="14-4706" title_number="14" title_name="Miscellaneous Consumer Protection Provisions" subtitle_number="47" subtitle_name="Online Data Privacy Act">
  <level label="a">
    <level label="1">
      <text>A consumer may designate an individual to serve as the consumer’s authorized agent and act on the consumer’s behalf to opt out of the processing of the consumer’s personal data for one or more of the purposes specified in § 14–4705(b)(7) of this subtitle.</text>
    </level>
    <level label="2">
      <text>A consumer may designate an authorized agent by an Internet link or a browser setting, browser extension, global device setting, or other similar technology, indicating a consumer’s intent to opt out of the processing of the consumer’s personal data.</text>
    </level>
  </level>
  <level label="b">
    <text>A controller shall comply with an opt–out request received from an authorized agent if, using commercially reasonable efforts, the controller is able to authenticate:</text>
    <level label="1">
      <text>The identity of the consumer; and</text>
    </level>
    <level label="2">
      <text>The authorized agent’s authority to act on the consumer’s behalf.</text>
    </level>
  </level>
</section>
