My energy account already exists. The company holds my name, my date of birth, my address, my email address, my mobile number. They hold these details because I supplied them when I opened the account, and because the account has been active long enough that the details have been verified, used, and stored in whatever system manages the relationship between us. The relationship is established. The record is complete.
I went to the account settings to opt out of marketing.
The opt-out process required me to provide my name, my date of birth, my address, my email address, and my mobile number. None of these fields were optional. The system would not proceed without them. The system that manages marketing preferences did not communicate with the system that manages my account. It required its own copy of the data, its own validation, its own record of who I was before it would record that I did not want to be contacted.
To decline the use of my data, I was required to supply more of it.
The surface appearance of the process is procedural. A customer wishes to change a preference. The system identifies the customer, applies the change, confirms the outcome. The steps follow a recognisable logic. What the surface does not show is that the identification step—the part that establishes who is making the request—is doing something other than identification. It is doing data collection. The form that asks for name, date of birth, address, email, and mobile number to process an opt-out is a data capture form. Its fields are the fields of enrolment. The context has changed—this is a withdrawal rather than a sign-up—but the form has not.
The form is designed for input. The purpose of visiting it was to reduce input. The design and the purpose are in opposite directions, and the design wins because the design is what the system enforces.
This is not an error. The marketing preference system is separate from the account management system. It is centralised, which means it serves the organisation’s marketing function across multiple channels and products, and it requires its own records because its function is distinct from the function of managing individual accounts. When I approach it with my account credentials, it does not recognise those credentials as sufficient. It recognises only what it has collected itself. It has not collected anything about me because I have not previously engaged with it. My account’s record of who I am does not transfer. I am new input until I agree to be processed as new input.
The duplication is not incidental. It is structural. A system built to collect data collects data. A system built to manage marketing preferences manages marketing preferences as a data problem—preferences belong to records, records require fields, fields require values, values must be supplied. The fact that I have an account is not a form of identification this system accepts. The form of identification this system accepts is the completion of its own form.
Three things are happening simultaneously, each one small enough to appear procedural, and together producing a result that is the opposite of what the process nominally offers.
The opt-out becomes participation. To decline the marketing system’s use of my data, I must engage the marketing system fully. I cannot stand outside it and indicate non-consent. I must enter it, supply what it requires, and complete its process. Only the completion of the process registers as a preference change. I cannot achieve the preference change without the completion. The completion requires full engagement. The engagement is what I was attempting to decline.
The data minimisation becomes data expansion. The purpose of opting out of marketing is, in part, to limit the data the organisation holds and uses for marketing purposes. The process of opting out requires me to supply data to the marketing system that the marketing system did not previously hold. After the opt-out, the marketing system holds my name, date of birth, address, email, and mobile number, linked to a record indicating that I do not wish to receive marketing. Before the opt-out, it held none of this. The opt-out has expanded the data held by the system I was attempting to limit.
The identity proof replaces account linkage. My account proves who I am. My account is the established relationship between me and the organisation. The opt-out process does not use this relationship as the basis for identification. It requires me to prove my identity to a separate system using the same data that originally established the relationship, because the separate system does not accept the relationship as proof of identity. It accepts only its own verification. I am, for the purposes of this system, a new entrant until I have supplied what new entrants supply.
None of these fields were optional. This is the detail that removes the last available control. A form with optional fields allows the user to supply the minimum required for the transaction. A form with no optional fields requires full compliance as the condition of any outcome. The only way to achieve the outcome—the preference change—is to supply everything. The form does not offer a reduced version of the process for the reduced purpose of declining. It offers the full version of the process, unchanged, regardless of whether the purpose is to join or to leave.
The asymmetry has a consistent shape. Joining the marketing system is simple. The account sign-up process captured the relevant data automatically, as part of a broader process that required the data for legitimate purposes. The marketing preference was set at that point, by default, without a separate form, without additional friction. Leaving the marketing system is complex. It requires a separate process, a separate form, a separate act of data supply, none of it optional, producing a record in a system that did not previously hold any record of me.
Simple to join. Complex to leave.
The complexity is structural. A process that is difficult to complete is a process that many people will not complete. The people who abandon the process remain in the marketing system by default—not because they have decided to accept marketing, but because the process designed to remove them from it has required more of them than they were willing to provide. The default position is retention. The opt-out produces retention through friction rather than through consent.
The system does not distinguish between a person who chose to remain and a person who attempted to leave and encountered a form they declined to complete. Both appear in the marketing system as active recipients. The system records their status as the same. The preference has not been changed. The record shows no preference change. The system continues to send marketing. The system is functioning correctly.
The pattern this illustrates is familiar from the other structures I have been examining. The system measures its own activity and treats that measurement as the outcome. Here, the activity is form completion. A completed form registers as a preference change. Whether the person completing the form had any meaningful intention to supply additional data to the marketing system—whether the process matched what they came to do—does not appear in the record. The record shows: form completed. The preference has been applied. The system has processed a request. The request was a request to opt out. The processing of the request required full participation in the system the request was opting out of.
The system does not recognise me until I agree to be recognised in the way it prefers. My existing account is a relationship with the organisation. The marketing preference system is not the organisation. It is a system the organisation operates, with its own data requirements, its own validation, its own definitions of what constitutes a sufficient record. My account satisfies the organisation’s requirements. It does not satisfy this system’s requirements. This system’s requirements are the requirements of data collection, because this system is a data collection system, and its function is to collect data and manage preferences against that data, and the collection is prior to the management.
I came to reduce my engagement with the system. The system required full engagement as the condition of reduction. The condition and the purpose are in opposite directions. The condition is what the system enforces. The purpose is what I brought to it.
The account already existed. The preference did not.
To decline communication, I must supply the information required to receive it.
The form was not completed. The preference was not changed.
