Is the pre-checked newsletter checkbox legal?
In our day-to-day work, we often come across small but important details that can have significant implications under the law — especially when it comes to GDPR. Recently, one of our clients asked whether it was legal to have the newsletter sign-up checkbox automatically pre-checked in the shopping cart.
"No, according to GDPR, the newsletter sign-up checkbox must not be pre-checked by default."
What does GDPR say about consent?
Under GDPR, consent must be active and informed. This means you must not pre-fill or pre-check checkboxes as part of the checkout process without an active action from the customer. If the newsletter checkbox is checked by default, it does not give the customer a clear choice as to whether they wish to receive newsletters, and it may therefore be considered a violation of the rules.
This means the checkbox must be empty, and the customer must actively choose to check it if they wish to receive newsletters. In other words, it is not sufficient to rely on people unchecking the box if they do not want to receive marketing materials.
How do you ensure proper consent?
To comply with GDPR, you must ensure that customers:
- Actively choose to sign up for the newsletter.
- Are informed about what they are signing up for, i.e. that they understand they will receive marketing materials.
- Have the option to unsubscribe easily if they change their mind later.
A good way to ensure proper consent is to use a single opt-in model, where the user actively selects the checkbox themselves. In addition, there should be a short text informing the user of what they are signing up for, e.g. “Sign up for our newsletter and receive updates and offers.”
We have seen several examples of correct consent implementation in connection with newsletter sign-ups, and there must always be a clear and active action from the user, with all fields empty by default.
Should your checkbox be pre-filled?
In short: No. It is not in accordance with GDPR to have the newsletter sign-up checkbox pre-checked by default. The customer must have an active choice so that they clearly give consent to receive marketing materials.
Conclusion
To summarise, all webshops must pay close attention to how they implement consent for newsletters. Having a checkbox pre-checked by default can lead to legal issues and damage customer trust. It is best to make consent active and informed, as GDPR requires, so that both you and your customers are protected.
Do you have questions about GDPR or consent in your webshop? We are always ready to help!
Want to read more about GDPR — click here.
