Unlock AI Compliance: Master the new EU AI Act with our comprehensive guide.

Share

3 min read

Writen by Zlatko Delev

Posted on: January 27, 2022

Existing customers: the ‘soft opt-in’

Although organizations can generally only send marketing texts or emails with specific consent, there is an exception to this rule for existing customers, known as the ‘soft opt-in’. This means organizations can send marketing texts or emails if:

 · they have obtained the contact details during a sale (or negotiations for a sale) of a product or service to that person.

 · they are only marketing their own similar products or services; and

 · they gave the person a simple opportunity to refuse or opt out of the marketing, both when first collecting the details and in every message after that.

The texts or emails must be marketing products or services, which means that the soft opt-in exception can only apply to commercial marketing. Charities, political parties, or other not-for-profit bodies will not be able to rely on the soft opt-in when sending campaigning texts or emails, even to existing supporters. In other words, texts or emails promoting the aims or ideals of an organization can only be sent with specific consent.

The contact details must be obtained directly from the individual by the organization who wishes to engage in the marketing and the marketing must be in relation to that organization’s similar products and services. Therefore, the soft opt-in can only be relied upon by the organization that collected the contact details. This means organizations cannot rely on a soft opt-in if they obtained a marketing list from a third party – they will need specific consent. See the section on indirect (third party) consent for more on this.

The customer does not actually have to have bought anything to trigger the soft opt-in. It is enough if ‘negotiations for a sale’ took place. This means that the customer should have actively expressed an interest in buying an organization’s products or services – for example, by requesting a quote, or asking for more details of what it offers. There must be some sort of express communication: The communication must be about buying products or services. It is not enough simply to send any query.

Organizations can only send texts or emails about similar products or services. We consider that the key question here is whether the customer would reasonably expect messages about the product or service in question. This is likely to depend on the context – including the type of business and the category of product. For example, someone who has shopped at a supermarket might reasonably expect messages about a much wider range of goods than someone who has shopped at a specialist store for a specialist product. Organizations must give the customer the chance to opt out – both when they first collect the details, and in every email or text.

Organizations should not assume that all customers will be happy to get marketing texts or emails in future and cannot rely on the soft opt-in rule unless they provided a clear opportunity to opt out first.

It must be simple to opt out. When first collecting a customer’s details, this should be part of the same process (e.g., online forms should include a prominent opt-out box, and staff taking down details in person should specifically offer an opt-out). In subsequent messages, we consider that the individual should be able to reply directly to the message or click a clear ‘unsubscribe’ link. In the case of text messages, organizations.

Contact Us

Hope you find this useful. If you need an EU Rep, have any GDPR questions, or have received a SAR or Regulator request and need help then please contact us anytime. We are always happy to help...
GDPR Local team.

Contact Us

Recent blogs

Article 14 Guide: Meeting Regulatory Requirements for Personal Data Not Directly Obtained from Data Subjects

Imagine a software-as-a-service (SaaS) company looking to grow its clientele by purchasing leads fr

Meet the GDPRLocal Team: Sibel Amet

Data protection is not an easy job, and sometimes it can get overwhelming. Working as a team, like

Empower Your AI Strategy: A Guide to ISO/IEC 42001 Implementation

In our recent blogs “The EU’s Artificial Intelligence Act and Its Implications for Business”

Get Your Account Now

Setup in just a few minutes. Enter your company details and choose the services you need.

Create Account

Get In Touch

Not sure which option to choose? Call, email, chat to us
anytime.

Contact Us
06 GDPR INFO

Stay Up-To-Date

Leave your details here and we’ll send you updates and information on all aspects of GDPR and EU Representative. We won’t bombard you with emails and you will be able to tell us to stop anytime.

Full Name is required!

Business Email is required!

Company is required!

Please accept the Terms and Conditions and Privacy Policy