@Shaf,
@Ashwin Sande,
@Muru - sharing my two cents. There are basically three key buckets when it comes to data privacy:
1.
Opt-in --> Before any marketing activity, get prospect consent
2.
Opt-out --> Until individual unsubscribes
3.
Double opt-in --> Consent to be collected at the time of getting the data (say ads, forms on web, landing page) + email confirmation to be done by the user/prospect before any marketing activity
The below article gives a good gist of countries in different buckets [
updated last week so more credible : ) ]
https://help.hubsell.com/en/articles/2436605-which-eu-countries-are-opt-in-which-are-opt-out
A few double opt-in countries include Dubai, India, Indonesia, Mexico, USA.
PS: US I believe have different privacy rules for different states (California, Virginia, Colorado etc)
PSS: India too has a data regulation bill pending from long. So companies need to accommodate accordingly once something materializes.
Hope this TL;DR helps!