What are lawful grounds for retaining unsubscribed addresses?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
When someone unsubscribes, your first instinct might be to delete their record entirely. Clean list, clean conscience. But deleting an unsubscribed address often creates the exact problem you were trying to avoid: if that person's email comes through your signup form again (or shows up on a third-party list you import), you'll have no record that they already opted out, and you'll end up sending them something they explicitly asked not to receive.
The legally sound reason to retain unsubscribed addresses is suppression: you're keeping the record not to email them, but to prevent accidentally emailing them again. Under CAN-SPAM, you must honor opt-out requests within 10 business days and you can't re-add unsubscribes without fresh consent. Under GDPR, the "legitimate interest" ground covers retaining an address in a suppression list specifically to prevent re-contacting someone who asked to be left alone. Most national data protection authorities accept this interpretation, and it's the standard approach recommended by the UK ICO and the EU data protection board.
What you're actually retaining is minimal: the email address, the date they unsubscribed, and the method (manual unsubscribe, spam complaint, bounce). GDPR's data minimization principle requires you to strip everything you don't need for the suppression purpose, so a suppression record should be lean. You don't need their name, purchase history, or engagement data to prevent re-adding them. Keep only what proves the opt-out happened and when.
Spam complaints are worth flagging differently from manual unsubscribes in your records. If someone marked you as spam, they're a higher-risk re-add even if they later opt in again through a different form. Some senders maintain a permanent do-not-contact flag for complainers, separate from the standard suppression list, and treat any new consent from that address with extra scrutiny before sending.
The practical implication is that "suppression list" and "active subscriber list" need to be distinct in your ESP. Most platforms handle this natively. But if you're sending from more than one system, syncing your suppression records across all of them is a compliance requirement. An address suppressed in your promotional ESP but not your transactional one is still a liability. Read the related article on managing different suppression types for how to organize them across systems.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
