I also need to know this. At this stage in the game (two weeks left), it's mission critical.

To me, if double opt-in is on, you are covered. However, it does really need to be accompanied by a checkbox asking if the user wants to sign-up. Along side the checkbox accepting the privacy policy. These are front-line GDPR requirements.

Mailchimp has this new "magic" GDPR compliant field. If you set your form to be GDPR compliant than your form gets the GDPR field.

The problem right now for integrations such as CMC is that we don't get access to this field over the API. If I can't access it, I can't show it in the form and since I don't even know what the name of it is - I can't display something similar and send the data to it. I don't know how this thing is internally processed by them and what they expect to see.

CMC has double opt-in, but we currently don't have a checkbox. Once mailchimp provides access to this field we'll add it in CMC as well.

Regards,
Daniel

P.S. It goes to say that we are not lawyers, but am I the only one thinking that all this idiotic? So you enter your email address, hit subscribe. Then you have to confirm over email whether you want to join or not. And now I'll come to you and tell you - you don't have a stupid checkbox on your form - you are not allowed to send me emails??? WTF??? What's wrong with the world we live in?

OK, thanks for the reply.

I think, as with MC's own embedded sign-up forms, adding brief text explaining about verification and accepting the privacy policy may be temporary solutions.

Hopefully the new GDPR suite in Joomla development will help with the recording of various data consent issues.

I understand your frustration regarding GDPR. It is one massive PITA for businesses, though a significant benefit to individuals' privacy. The absurdities of certain new consent requirements are, unfortunately, the direct result of years of bad privacy practices by many businesses—unintentionally or intentionally.

My favourite example so far is in relation to when we have to create a form to allow people to say that they don't want their details stored, but then have to store that preference in order to know not to store it