Governing opt-out enforcement in generative AI