we have users who have opted-in via a GDPR compliant opt-in process; but since then, have changed email address (because they have changed job, have been acquired by another organization, etc.)
They are notifiing us of their change of address via an email (and not the subscription center). Is that enough to keep their status as opted-in or do they need to opt-in again?
We keep the opt in with the email address so they have to opt in again with the new email address.
Jackie Potts Thanks for your answer. Do you know if - legally - this is the way to do?
There are many interpretations of GDPR so that is what we believe we should do, but you probably need to consult your legal team to know how your company interprets it.