16.

(1) An opt out mechanism contemplated under regulation 15(1)(d) shall—

(a)  have a visible, clear and easily understood explanation of how to opt out;

(b)  include a process for opting out that requires minimal time and effort;

(c)  provide a direct and accessible communication channel;

(d)  be free of charge or where necessary involve a nominal cost to a data subject; and

(e)  be accessible to persons with a disability.

(2) Where a data subject has opted out, a data controller or data processor shall not use or disclose their personal data for the purpose of direct marketing, in accordance with the data subject’s request.