Email double opt-in regional compliance

See also: 

• Double opt-in for email
• Using double opt-in with Ometria forms
• Double opt-in for SMS

While double opt-in is not mandatory under GDPR, it is considered a best practice in several European countries - particularly Germany.

In Europe, you can't send unsolicited marketing communications without the recipient's consent. 

GDPR (and equivalent laws in Norway and Switzerland) requires that you're able to demonstrate explicit marketing consent from the customers your contact.

See also: How does Ometria subscribe and unsubscribe contacts

Double opt-in is considered a best practice for compliance, reducing risks related to unauthorised use of email addresses and ensuring that consent is: 

• Freely given
• Specific
• Informed
• Unambiguous

This article identifies countries where double opt-in is enforced to some extent by the relevant data protection authorities.

If you have contacts with billing addresses in any of these countries then we recommend you implement double opt-in. 

🇦🇹 Austria

Double opt-in is recommended as a security measure to prevent unauthorised data processing.

See: Datenschutzbehörde

🇩🇰 Denmark

Double opt-in is recommended as a good practice for obtaining clear and explicit consent, reducing the risk of misunderstandings and misuse of personal data. 

See: Datatilsynet

🇫🇮 Finland

Double opt-in is considered a best practice. 

See: Tietosuojavaltuutetun Toimisto

🇩🇪 Germany

Double opt-in is considered a necessary practice for sending any marketing communications.

German mailbox providers require double opt-in for gathering marketing consent. 

See: Datenschutzkonferenz

🇬🇷 Greece

Double opt-in is recommended for obtaining consent for email marketing. 

See: Hellenic Data Protection Authority

🇱🇺 Luxembourg

Double opt-in provides a clear audit trail that can be used to demonstrate compliance with the Nation Commission’s guidelines.

See: National Commission for Data Protection

🇳🇱 Netherlands

Double opt-in is recommended to ensure that consent is clearly documented and that individuals are fully aware of what they are consenting to. 

See: Autoriteit Persoonsgegevens

🇳🇴 Norway

Double opt-in is strongly recommended to ensure explicit and verifiable consent for email marketing.

See: Datatilsynet

🇨🇭Switzerland

Switzerland's Federal Act on Data Protection (FADP) is closely aligned to GDPR. 

Double opt-in is a reliable way to align with the principles of the FADP.

See: Federal Data Protection and Information Commissioner

🇺🇸 United States

Double opt-in is not required for sending email marketing, but it is strongly recommended for SMS. 

See: SMS country specific marketing compliance