Under CCPA, users over 16yo only need to be given an opt-out for data sharing, while users under 16yo have to provide affirmative opt-in.