Definition
GDPR (2018+) requires that EU residents give explicit, informed, freely-given consent before you collect their email for marketing. Pre-checked boxes don't count. Bundled consent (subscribe + accept terms in one click) doesn't count. You must let them withdraw consent easily, provide their data on request, and delete on demand. Non-compliance fines can reach €20M or 4% of global revenue.