
How to Keep Email Consent Records
Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.
Tag
10 articles tagged with email compliance.

Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.

CASL is the strictest anti-spam law in the English-speaking world, it applies to anyone emailing Canadians, and the penalties are large enough to notice.

One-click unsubscribe is required for bulk senders and easy to implement wrongly — the common mistake silently removes subscribers who never asked to leave.
What the law actually requires from your unsubscribe link under CAN-SPAM, CASL, and GDPR, plus the one-click List-Unsubscribe headers major mailbox providers now require from bulk senders. Includes a comparison table of deadlines, the friction you cannot add, footer requirements, and preference-center best practice.
Email consent wording has to name who is sending, what they will send, how often, and how to stop. This guide gives seven copy-and-adapt checkbox examples by scenario, a table of failing wording with fixes, the design traps around the box itself, how GDPR, CAN-SPAM and CASL differ, and exactly what to record so consent can be proven later.
A practical GDPR checklist for email marketers: lawful basis, signup form rules, the consent records you must be able to produce, subscriber rights that actually work, DPAs with processors, retention limits, and a one-page audit you can run today.
Your website privacy policy probably ignores your email program. Here is the full data inventory to disclose, how to handle legal basis and subprocessors, a retention schedule you can actually execute, and where the policy must be linked.

CAN-SPAM is shorter and stranger than people assume — it does not require opt-in, but it does carry a per-email penalty and it holds you responsible for what your agency sends.

Most GDPR advice for email marketers is written by people who have never run a list. Here is what actually counts as valid consent, what you have to be able to prove, and where legitimate interest really applies.
Transactional emails are triggered by a user's action; marketing emails promote to a list. Here's the difference in purpose, consent, deliverability, and design.