A marketing email lacks any unsubscribe mechanism and states that GDPR consent is 'forever.' What is wrong with that approach?
Select an answer to reveal the explanation.
Short Explanation
Consent is a lease, not a deed in perpetuity. People must be able to walk away, and marketing needs a clear stop button. Forever-consent with no unsubscribe is the opposite of how GDPR treats choice.
Full Explanation
GDPR consent is withdrawable at any time, and Article 21 provides an absolute right to object to processing for direct marketing. Controllers must honour withdrawal and provide effective mechanisms such as unsubscribe. Claiming consent is permanent and omitting opt-out pathways conflicts with those core rights.