GDPR has 99 articles. The marketing-relevant subset is narrow: consent for email, how people withdraw it, and automated decision-making in the growth stack.
Article 7 (consent) and Article 22 (automated decision-making), with the ePrivacy Directive, define the compliant signup form, marketing email, and segmentation engine — the two highest-frequency audit violations.
What “freely given, specific, informed, and unambiguous” requires — pre-ticked boxes, bundled consents, and consent-as-service-condition all fail.
When the engine decides who gets the airdrop or bonus, Article 22 requires lawful basis, transparency, and human review.
Paste any signup form, email, or cookie banner. Verdict against GDPR + ePrivacy in seconds.
A signed audit across MiCA, FCA, and GDPR. Five business days.
Paste a URL or your copy — the full verdict lands in seconds. Free, no signup.