Any sites that reveal sensitive personal information, such as Social Security numbers, medical and financial data, ID numbers, sexual orientation or sites that share consumer information with unaffiliated third parties for commercial purposes would also be subject to the opt-in rule.