One main difference between GDPR and CCPA is whether or not sites are allowed to gather information and "opt-out" of that information gathering or if the sites needs to get permission before they start collecting, therefore requiring you to "opt-in" to data collection. Which policy represents the "opt-out" approach? Choose one 2 points GDPR CCPA