GDPR FAQs

The European Union's (EU) General Data Protection Regulation (GDPR) came into effect on May 25, 2018, and affects all businesses that control and process the data of residents and citizens of the EU. To learn more about the GDPR and how it impacts you, read our blog post: GDPR: What it is, how it affects you, and what we're doing to help.

Below are some answers to questions we're commonly asked about GDPR. For help with something that hasn't been addressed here, see our Trust Center, or contact us.

Does Campaign Monitor comply with the GDPR?

Campaign Monitor is compliant with the GDPR, and continues to regularly monitor and audit for compliance. For the latest information relating to Consent, Lawful Data Processing, Security and more, see our Trust Center.

Additionally, we have adopted Privacy by Design principles into our product development process, and work with all our sub-processors to ensure they appropriately protect our customer's data.

How do I gather consent from subscribers?

You can make use of the following features:

• For new subscribers — You can turn on the subscriber permission options on your subscribe pages and HTML subscribe forms. You can also provide tracking permission when importing subscribers from a file, adding subscribers manually, or by using the consenttotrack parameter with the API.
• For existing subscribers — You can turn on the subscriber permission options in the preference center, then provide a link to the preference center in your emails.

How do I view a subscriber's tracking permission?

To see if a subscriber has given tracking permission or not, you can:

• View their subscriber snapshot.
• Open the subscriber list they are on, and check the "Permission to track" column.
• Export the subscriber list with the "Permission to track" checkbox selected.
• Use the API.

How do I provide permission to track for transactional email?

Include a consenttotrack parameter and value when making the API call, for both smart and classic transactional emails.

How do I add my privacy and cookie policies to my subscribe form?

You can add links to your policies through the subscribe page and preference center. For HTML subscribe forms, you will need to add the HTML yourself to link to your policies.

How do I exercise my or my subcriber's rights under the GDPR, including deletion?

Follow these instructions.

Where can I request a data protection agreement (DPA)?