(a) A consumer may designate an authorized agent to act on the consumer’s behalf to opt out of the processing of such consumer’s personal data for 1 or more of the purposes specified in § 12D-104(a)(6) of this title. The consumer may designate such authorized agent by way of, among other things, a platform, technology, or mechanism, including an Internet link or a browser setting, browser extension, or global device setting, indicating such consumer’s intent to opt out of such processing. For the purposes of such designation, the platform, technology, or mechanism may function as the agent for purposes of conveying the consumer’s decision to opt-out.
(b) A controller shall comply with an opt-out request received from an authorized agent if the controller is able to verify, with commercially-reasonable effort, the identity of the consumer and the authorized agent’s authority to act on such consumer’s behalf. The Department of Justice may publish or reference on its website a list of agents who presumptively shall have such authority unless the controller has established a reasonable basis to conclude that the agent lacks such authority.