Sending emails without consent.

[ThatDevAaron]

Okay, so users that use my website don't have to confirm there email, and I do not really want to implement that kind of system, however I do want to send emails to said email addresses for things like:

 - Suspicious Account Activity
(Stuff of that sort)

Now this will obviously have a 'disable' feature in which the receiver of the email can list there email in our whitelist.

 

[ThatDevAaron]

Would this break any laws?

 

[Alan]

No

 

[SYN]

Account notifications, nothing wrong with that and doesn't require any sort of user confirmation. Its default on a lot of sites these days.

 

[legaleagle99]

Hi ThatDev, if your website is collecting email address from users, which does amount to "personal data" then strictly speaking you would need a privacy policy on your website setting out the purposes for which you will be collecting their data, what you'll be doing with it (even if just holding it!) etc. This is a requirement under GDPR laws.

When it comes to emailing them regarding suspicious account notices for example, then its very unlikely you would need their consent to do so (as you could rely on another legal basis, like "legitimate interests/for purposes of fulfilling a contract/services).

Hope that helps