Article
GDPR in Email Marketing [2026]: 5-Step Guide - Mailtrap
mailtrap.io
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
A list full of people who haven’t opened an email in two years is a list that signals to Gmail that your sends are unwanted (which is how you end up in the promotions tab on a good day, and the spam folder on a bad one). The same list cleanup that keeps you GDPR-compliant is the one that keeps you out of the spam folder. “Set a calendar reminder. Quarterly is reasonable. Audit your list. Re-engage the wobbly ones. Suppress the dead ones.” What Happens If You Don’t Comply?
Three tests. If any one of them is true, GDPR applies to you: “You’re established in the EU or UK. Office, subsidiary, single employee, doesn’t matter the size.” You offer goods or services to people in the EU or UK. Free or paid. Whether you have a euro pricing option, a translated landing page, or just a checkout that accepts EU customers. That still counts.
You offer goods or services to people in the EU or UK. Free or paid. Whether you have a euro pricing option, a translated landing page, or just a checkout that accepts EU customers. That still counts. “You monitor the behavior of people in the EU or UK. Tracking, retargeting, behavioral analytics on EU visitors. All of it.” Quick example. You’re a US-based SaaS company headquartered in Austin. You don’t have a single employee in Europe. But your signup form accepts anyone, you have customers in Berlin and Dublin, and your marketing automation fires welcome sequences to all of them.
A quick note for anyone coming from the US side: GDPR is not CAN-SPAM. CAN-SPAM is opt-out. You can email someone who never asked, as long as you give them a way to leave. GDPR is opt-in. You’re not allowed to email someone for marketing purposes unless they’ve actively agreed to it. Two completely different philosophies, and confusing them is how a lot of US companies end up with surprise fines. “If any one of them is true, GDPR applies to you:” You’re established in the EU or UK. Office, subsidiary, single employee, doesn’t matter the size.