Definition
GDPR requires a lawful basis and rights for subscribers. Non-compliance risks large fines.
Best Practices
- Collect consent with clear, specific opt-ins.
- Support data access and erasure requests.
- Keep evidence of consent and processing.
Was this useful?
Related Glossary Terms
Anonymized Data
Anonymized data is email subscriber or interaction data that has been stripped of personally identifiable information so individuals cannot be re-identified.
CAN-SPAM Act
The CAN-SPAM Act is a US law that sets rules for commercial email. It requires accurate subject lines, a physical address, a clear opt-out mechanism, and prompt processing of unsubscribes. Violations can result in penalties up to $51,744 per email.
Consent Banner
A consent banner is an on-site notice that informs visitors about data collection and allows them to agree to or manage email marketing preferences.
Consent Expiry (Email Marketing)
Consent expiry is the time period after which a subscriber's permission to send marketing emails legally expires and must be re-obtained, varying by jurisdiction and consent type.
Cookieless Tracking in Email
Cookieless tracking in email is the measurement of email-driven behavior using methods that do not rely on third-party browser cookies.
Data Retention Schedule (Email Marketing)
A data retention schedule defines how long subscriber personal data is stored after unsubscribing or becoming inactive, ensuring compliance with GDPR, CCPA, and similar privacy laws.
Frequently Asked Questions
If you market to EU data subjects, yes in most cases.
Access, erasure, rectification and objection.
Fines up to a substantial percentage of turnover.