Form Opt In Legalities

[TRS]

If a lead navigates to your website and opts to register to something and then they are redirected to your hubspot form (stand alone) to opt in officially - does that mean you have been compliant with GDPR?

[karstenkoehler · Accepted solution]

Hi @TRS,

It's hard to simplify and break down GDPR compliance into a few sentences. The flow you've described wouldn't automatically make you compliant. Compliance also depends on whether you ask for the consent to process contact's data and communicate with this contact on the form. It also depends on the type of communication you're planning to send (transactional or promotional).

Generally, the type of path you want to build starts with a form that asks for the consent to process and communicate for a certain email subscription(s). If the contact is not already opted-in, they would receive an opt-in message. Only after confirming this email (double opt-in) would they be eligible to receive further communication for this/these particular email subscription(s).

This HubSpot page is a great resource for all things GDPR: https://www.hubspot.com/data-privacy/gdpr

There is also a knowledge base article that might be helpful for you: https://knowledge.hubspot.com/account/how-do-i-turn-on-gdpr-functionality-in-my-hubspot-account

(This post does not constitute legal advice.)

Hope this helps!