How to handle partial or topic-based consent?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

Topic-based consent is exactly what it sounds like: you ask subscribers which types of email they want, and you only send them what they agreed to. Someone might opt into product updates but not your weekly digest. Or they want sale alerts but not content newsletters. That's fine. Good, actually.

The mechanics require two things: granular collection at signup, and preference management after it.

At signup: Instead of one checkbox that says "I agree to receive emails from [Company]," offer checkboxes for each category. "Product updates", "Weekly digest", "Promotions and offers". Each one its own consent record. Yes, this slightly complicates the form, but it dramatically reduces unsubscribes later because people opted into exactly what they're getting.

After signup: Your preference center needs to stay in sync with what you're actually sending. If someone later wants to change what they receive, they update their preferences. Your ESP needs to segment by those preferences and you need to check before every campaign that you're only sending to people who consented to that type.

Under GDPR: consent needs to be specific and purposeful. "General marketing" is weak. "Product update emails" is better. Each category should have a distinct stored record with a timestamp.

The catch: your preference center and your sending segments need to actually stay synchronized. This is where implementations fall apart. The consent is captured correctly, but the segments in the ESP don't reflect it. Audit that regularly.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Get step-by-step instructions for your setup.

I want to set up topic-based consent for my email program. My current setup: [describe your ESP, how you currently capture consent, and what email types you send]. How do I restructure my signup forms and preference center to capture granular consent properly? And what does a GDPR-compliant consent record look like for each category?

Edit the yellow boxes, then send to the AI of your choice.