Somewhat. Opt-in is required for marketing purposes. Fingerprinting counts as PII due to its potential to personally identify an individual. Other legitimate uses, such as fraud detection, do not require opt-in.