Definition
Consent recency is a measure of how long ago a subscriber gave or last confirmed their consent to receive email marketing. There is no universal expiry date for consent under the GDPR or PECR, but regulators expect consent to stay current and reflect the subscriber's ongoing intent.
The more time passes, the more a subscriber's interests, contact details and the relationship itself can change. Old consent weakens both compliance defensibility and the relevance of your list.
Why Consent Recency Matters
| Factor | Stale Consent | Fresh Consent |
|---|---|---|
| Defensibility | Harder to justify | Clearly current |
| Engagement | Likely low | Typically higher |
| Subscriber intent | Unclear or faded | Actively confirmed |
| Risk of complaint | Higher | Lower |
Fresh, recent consent is both stronger from a compliance view and more likely to reflect a genuinely interested subscriber.
The Risks of Stale Consent
- Regulatory uncertainty: Consent given years ago may not reflect current intent.
- Low engagement: Disengaged recipients harm deliverability.
- Outdated data: Old consent often means outdated addresses and preferences.
- Complaint risk: Recipients who forgot signing up may report the mail as spam.
How to Refresh Consent
- Run a re-permission campaign: Ask long-silent subscribers to confirm they still want email.
- Confirm at sign-up quality points: Capture clear consent date and source at subscription.
- Remove those who do not reconfirm: Drop stale or unresponsive contacts.
- Update the consent record: Log the new date when consent is refreshed.
- Segment by recency: Group subscribers by when they last consented or engaged.
Related Glossary Terms
Abuse Complaint
An abuse complaint is a report from a recipient who marks an email as spam, which negatively affects sender reputation and deliverability.
Anonymized Data
Anonymized data is email subscriber or interaction data that has been stripped of personally identifiable information so individuals cannot be re-identified.
CAN-SPAM Act
The CAN-SPAM Act is a US law that sets rules for commercial email. It requires accurate subject lines, a physical address, a clear opt-out mechanism, and prompt processing of unsubscribes. Violations can result in penalties up to $51,744 per email.
Cold Email
A cold email is an unsolicited message sent to a recipient who has not previously opted in, commonly used for B2B outreach, sales prospecting and networking.
Consent Banner
A consent banner is an on-site notice that informs visitors about data collection and allows them to agree to or manage email marketing preferences.
Consent Expiry (Email Marketing)
Consent expiry is the time period after which a subscriber's permission to send marketing emails legally expires and must be re-obtained, varying by jurisdiction and consent type.
Frequently Asked Questions
Consent recency is how recently a subscriber gave or last confirmed their consent to receive email. It reflects whether permission is current or has grown stale over time.
There is no fixed expiry under the GDPR or PECR. Consent lasts as long as it remains a genuine reflection of the subscriber's continued intent, which is why refreshing old or inactive lists with a re-permission prompt is advisable.
Stale consent is harder to defend, often means low engagement and outdated data, and raises the risk of complaints. It weakens both compliance and campaign health.
Run a dedicated re-permission campaign inviting silent subscribers to confirm they still want email, keep those who reconfirm, remove those who do not, and update their consent date and source in your records.