GDPR setting only lets customers opt-out (not opt-in)

  • Resolved james4311

    (@james4311)


    2 years, 4 months ago

    Great plugin but I have one problem.

    GDPR requires that users explicitly consent to receiving emails but this plugin only seems to give an option for users to opt-out.

    Users should be opted out by default unless they consent to receiving emails (the opposite of the current behaviour).

    Currently this means that the plugin is unsuitable for use in any websites that serve users in the EU.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support Sravan Bhaskaravajjula

    (@bhshravankumar)

    Hello @james4311,

    Can you provide a reference regarding the GDPR requirement, I will forward the information to our internal team for review.

    Looking forward to hearing from you.

    Thread Starter james4311

    (@james4311)

    Thanks Sravan.

    This page details the requirements: https://gdpr.eu/gdpr-consent-requirements/

    Specifically:
    “Where [data] processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.”

    And:
    “Consent must be unambiguous…there should be no question about whether the data subject has consented. ‘Silence, pre-ticked boxes or inactivity should not therefore constitute consent…'”

    I would think that a toggle switch beneath the email field (off by default) with a short message and optional link to the website privacy policy would meet these requirements.

    Plugin Support Sravan Bhaskaravajjula

    (@bhshravankumar)

    Hello @james4311,

    Thanks for sharing the GDPR requirements details with us, I will forward the details to our internal team, and they will review the requirement.

    Hope this helps.

    Thread Starter james4311

    (@james4311)

    Thanks Sravan.

    Plugin Support Sravan Bhaskaravajjula

    (@bhshravankumar)

    Hello @james4311,

    I have forwarded the details to our internal team, they will review and plan accordingly.

    If you have any further questions, you can start a new thread.

    Thank you!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘GDPR setting only lets customers opt-out (not opt-in)’ is closed to new replies.