The forms are all the same for opting out, but what exactly they let you put out of is different. In Citi's case it seems to include sharing information with their affiliated for direct marketing, which is what we're concerned about. (I'm not sure what the law is regarding sharing for other purposes though.)