When personal settings are defaulted for users, enforce that they are defaulted in favour of the user and not in favour of the organisation. E.g. the opt-in tick boxes you often see in various forms.
Furthermore, ensure all personal settings are accessible and transparent for users. Also provide a data dictionary for these settings to ensure users understand them, and use plain English in the language.
Some users may not know what default settings have been applied for their access to services, nor what this means for them. By defaulting them in favour of the user, there is less risk of organisations misusing data to their advantage.