
How to Keep Email Consent Records
Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.
Tag
6 articles tagged with GDPR.

Under GDPR and CASL the burden of proving consent is on you. Here is exactly what to store, and the field everyone forgets until a regulator asks.
What the law actually requires from your unsubscribe link under CAN-SPAM, CASL, and GDPR, plus the one-click List-Unsubscribe headers major mailbox providers now require from bulk senders. Includes a comparison table of deadlines, the friction you cannot add, footer requirements, and preference-center best practice.
Email consent wording has to name who is sending, what they will send, how often, and how to stop. This guide gives seven copy-and-adapt checkbox examples by scenario, a table of failing wording with fixes, the design traps around the box itself, how GDPR, CAN-SPAM and CASL differ, and exactly what to record so consent can be proven later.
How long to keep each type of subscriber data, from consent records and engagement history to suppression lists that should never be deleted. Includes a retention period table by data type, the delete vs anonymize vs suppress decision, and a six-step policy you can actually operate.
Your website privacy policy probably ignores your email program. Here is the full data inventory to disclose, how to handle legal basis and subprocessors, a retention schedule you can actually execute, and where the policy must be linked.

Most GDPR advice for email marketers is written by people who have never run a list. Here is what actually counts as valid consent, what you have to be able to prove, and where legitimate interest really applies.