We run this via a country selector in the form, and visibility rules. Once they are in Marketo, we "double opt in" via confirmation email anyone from Canada or Germany, where consent laws are the strictest. In any case, a full record of subscription actions are kept in Salesforce as a custom object, showing date and source of any subscribe or unsubscribe.
.png)