How do I send a GDPR-compliant newsletter?
Send only to people who have demonstrably agreed, put an unsubscribe link in every email, and honour unsubscribes. Double opt-in and keeping the consent wording are common ways to demonstrate consent.
Updated:
In practice
- On the sign-up form, say exactly what people sign up for, and keep that wording.
- Switch on double opt-in.
- Do not send to unsubscribed or bounced addresses.
- On request, hand over or erase a person's data.
Under Article 7(1) of the GDPR the controller must be able to demonstrate consent. This is general information, not legal advice.
How HelloTeam does it
- Forms can use double opt-in; consent is recorded at the click, with the wording that was shown.
- An unsubscribe goes onto a suppression list that outranks a later import.
- A bounced address is taken out of sending.
Which module?
Module: Campaigns (€7.90 / month).
Questions
Is double opt-in mandatory?
The GDPR does not require it as such, but it does require consent to be demonstrable, and double opt-in is a common way to do that.
Sources
This is general information, not legal or tax advice. The rules come from: Az (EU) 2016/679 rendelet (GDPR), EUR-Lex (checked )