What is an “affirmative action” in opt-in?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
Affirmative action in opt-in means the subscriber has to actively do something to say yes. Check an unchecked box. Click a subscribe button. Fill in their email and hit submit. The key word is actively. Consent can't come from silence, inaction, or a pre-selected option they never chose to tick.
GDPR spells this out clearly: consent must involve a "clear affirmative act" and can't be obtained through silence, pre-ticked boxes, or inactivity. That standard has shaped signup practices globally, even in places without identical legal requirements.
A few patterns that fail the affirmative action test:
- Pre-checked subscription boxes the user has to uncheck to opt out
- Bundled consent where agreeing to terms of service automatically adds someone to your marketing list
- Any signup flow where "opted in" is the default outcome unless the user takes extra steps
For your signup forms, this means the subscription should never happen unless the user explicitly made it happen. Marketing consent should be separate from other required actions like creating an account or completing a purchase. If someone ended up on your list without choosing to be there, you don't have valid consent. You have a compliance risk waiting to surface.
Not sure if your signup flow meets the standard? Our free form review at reviewmyemails.com/sos can help you check. See also double opt-in.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
