> if I put up a simple newsletter to contact my users, I have their emails Okay, so then the only requirement of GDPR is that you must make the newsletter opt-

> if I put up a simple newsletter to contact my users, I have their emails Okay, so then the only requirement of GDPR is that you must make the newsletter opt-in rather than opt-out and you must make the unsubscribe process as easy as the subscribe process. This is indeed a problem if you run Mailman, which has a somewhat annoying unsubscribe process and which does not have the funding[1] to address this. [1] http://mailman.9.n7.nabble.com/GDPR-td46775.html http://mailman.9.n7.nabble.com/GDPR-td46775.html