Stay compliant in GDPR and CASL jurisdictions automatically with a new email configuration setting, "Opt-in Email Marketing" in Business App.
Screenshot 2026-05-21 at 8
Consent, enforced where it matters
The Opt-in Email Marketing setting requires explicit email and SMS consent before contacts can be added to a campaign, and surfaces clear validation errors at send time, so your clients can stay compliant in GDPR and CASL jurisdictions without manual checks.
For new account groups in GDPR countries, the setting is enabled by default. Partners operating in other jurisdictions can turn it on selectively to match local regulations (CASL in Canada, GDPR in the EU and UK, etc.).
When the setting is on, the campaign builder surfaces validation errors for any recipient missing the appropriate consent — so the campaign can't go out to a contact who hasn't opted in.
Why it matters
GDPR and CASL aren't optional. Businesses operating in those jurisdictions need to prove that every recipient on every campaign has given explicit consent to receive marketing, and proving it after the fact is the hard part. Before this update, consent was tracked in the CRM but still required manual checks.
Now, any business running campaigns in CASL or GDPR jurisdictions can trust that their contacts' consent is respected automatically.
Who it's for
  • Partners and their clients operating in GDPR jurisdictions (EU, UK)
  • Partners and their clients operating under CASL (Canada)
  • Any partner who wants explicit-opt-in enforcement for marketing campaigns
  • SMBs in regulated markets running email and SMS campaigns through Vendasta
How to get started
For new account groups in GDPR countries, this setting is on by default. For other account groups, partners can enable it from the Email Configuration settings in Business App.
  1. Go to
    Business App > Settings > Email Configuration
  2. Enable "Opt-in Email Marketing"
  3. Save
FAQs
Q: Is this on automatically for me?
A: For new account groups created in GDPR countries, yes. For other account groups, a partner administrator needs to turn it on under Email Configuration in Business App.
Q: What happens to existing contacts who don't have a consent flag?
A: Those contacts will appear as validation errors when added to a campaign. To send to them, you'll need to capture explicit consent and update the contact record — or remove them from the campaign.
Q: Does this cover SMS in addition to email?
A: Yes. The setting validates email consent for email campaigns and SMS consent for SMS campaigns.
Q: Will turning this on break campaigns I'm already running?
A: It will surface validation errors for any in-progress or queued campaigns that include contacts missing consent. Those contacts won't receive the campaign until consent is captured.