Last reviewed:
Translated from German; if the versions differ, the German version applies.
Not legal advice: Legal content on this page appears only as verbatim quotations from statutes, court rulings or authority papers, with their source; quotations from German texts are our working translations. We do not assess them ourselves, and no lawyer has reviewed this page. It is no substitute for legal advice in your individual case.
Opt-out
In short: To opt out means to take yourself off something. In email marketing the word has two meanings: unsubscribing itself, for example via an unsubscribe link, and a model in which someone receives messages until they object – the counterpart to opt-in, where agreement comes first.
Two meanings
Opt-out as an action: A person who no longer wants a newsletter takes themselves off the list – via the unsubscribe link, via a button in their mail program or by replying to the sender. A suppression list then technically prevents the address from being written to again after a later import.
Opt-out as a model: People are written to without prior agreement, and anyone who no longer wants to receive anything has to object actively. With opt-in it is the other way round: first the agreement, then the messages. The terms opt-in and opt-out do not appear in the wording of the GDPR or of Section 7 of the UWG (the German Act against Unfair Competition, Gesetz gegen den unlauteren Wettbewerb); what the texts do say is shown by the quotations below.
Wording on consent, objection and unsubscribing
Quotations from German laws and authority papers are our working translations; only the German wording is authoritative (see the German version of this page). GDPR quotations follow the official English text.
On consent, Recital 32 of the EU General Data Protection Regulation (GDPR) states: “Silence, pre-ticked boxes or inactivity should not therefore constitute consent.”
On objecting to direct marketing, the GDPR provides: “Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.” (Art. 21(3) GDPR)
For advertising to customers, Section 7(3) UWG names, among other things, the conditions that “the customer has not objected to the use” (no. 3) and that the customer “is clearly and distinctly informed, when the address is collected and each time it is used, that they may object to the use at any time without incurring any costs other than the transmission costs at the basic rates” (no. 4, our translation).
On how unsubscribing should work, the German data protection authorities (Datenschutzkonferenz, DSK) write: “It should be possible to unsubscribe from email advertising with one click if possible (clicking the unsubscribe link in the promotional email) without additional hurdles or obstacles.” (DSK guidance on direct marketing, February 2022, section 5.3, p. 19, our translation)
We give no legal assessment of our own as to when which model is permissible. Further wordings: Unsubscribing from a newsletter and Advertising to existing customers.
How it differs
- Opt-out, withdrawal and objection: On consent, the GDPR says: “The data subject shall have the right to withdraw his or her consent at any time.” (Art. 7(3) sentence 1 GDPR) Objection to direct marketing is governed by Art. 21 GDPR. In everyday language, both are often simply called “unsubscribing”.
- Opt-out and double opt-in: Double opt-in concerns the beginning of a subscription, opt-out its end.
- Opt-out and suppression list: The suppression list is the technical memory for objections that have been declared.
Easily confused
- “Double opt-out”: The authorities mention this expression in connection with withdrawal: “For example, where consent is withdrawn via an online contact form, confirmation via the email address known to the controller can be requested, in line with a kind of ‘double opt-out’ procedure.” (guidance, section 3.7, p. 14, our translation)
- Opt-out in other fields: The word is also used outside marketing, with its own meaning there. This page is only about email.
Example
Technically, there is a second route besides the link in the text: header fields through which the mail program itself displays an “Unsubscribe” button. The example from RFC 8058 (Section 8.1):
List-Unsubscribe: <https://example.com/unsubscribe/opaquepart>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
If the person clicks the button, the program sends a POST request to this address and the unsubscribe is done without a web page having to be opened. Gmail requires one-click unsubscribe from senders who send more than 5,000 messages a day to Gmail accounts. Yahoo requires a working List-Unsubscribe header and gives a deadline of 2 days for processing unsubscribes.
Frequently asked questions
What does opt-out mean? To take yourself off something or to decide against something. For newsletters it usually means unsubscribing, or a model in which people are written to without prior agreement.
What is the difference between opt-in and opt-out? With opt-in, agreement comes first; with opt-out, the objection comes afterwards. Neither term appears in the GDPR or in Section 7 UWG; the wording on consent, withdrawal and objection is in the section above.
What do the authorities and mailbox providers say about timing? The German data protection authorities write: “If the objection is made via a link in a promotional email or via a setting in the customer portal, the personal data are no longer processed pursuant to Art. 21(3) GDPR. For purely electronically sent advertising, there is no reason in these cases to deviate from the wording of the law, according to which the objection must be complied with immediately.” (guidance, section 5.4, p. 20, our translation) Yahoo gives bulk senders a deadline of 2 days.
Related terms
Matching tool
- Pre-send checklist: check the unsubscribe link and
List-Unsubscribebefore every mailing.