
How to Keep Email Consent Records
Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.
Category
8 articles in Compliance and Privacy.

Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.

CASL is the strictest anti-spam law in the English-speaking world, it applies to anyone emailing Canadians, and the penalties are large enough to notice.

Double opt-in costs you a fifth of your signups and buys you a cleaner list, better deliverability and proof of consent. Here is when the trade is worth it.

One-click unsubscribe is required for bulk senders and easy to implement wrongly — the common mistake silently removes subscribers who never asked to leave.

The List-Unsubscribe header is what puts the unsubscribe link next to your name in Gmail. It is now required for bulk senders, and it protects you from spam complaints.

Since February 2024 Google and Yahoo enforce authentication, one-click unsubscribe and a spam complaint ceiling. Here is exactly what they check and how to pass.

CAN-SPAM is shorter and stranger than people assume — it does not require opt-in, but it does carry a per-email penalty and it holds you responsible for what your agency sends.

Most GDPR advice for email marketers is written by people who have never run a list. Here is what actually counts as valid consent, what you have to be able to prove, and where legitimate interest really applies.