There is only one sensible default, and that is opt-in. Requiring submission of a request to opt-out is never an acceptable solution.