# GDPR Compliant Double Opt-In **URL:** \ **Category:** General Discussion\ **Created:** [July 20, 2017, 4:44pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008 "2017-07-20T16:44:16Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 20, 2017, 4:44pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/1 "2017-07-20T16:44:16Z")
Has anyone succesfully created a GDPR compliant double opt-in campaign? I have tried several ways and none seem to work appropriately or easily. I need to be able for a contact to select wether they opt-in or out, and the date that they have done this. From that, this needs to update custom fields that specify wether they have opted in or out and the date. If they have not completed either action then an email reminder needs to be sent. Preticked tick boxes are not allowed, therefore default values on dropdowns are not either. Updating the date field seems to be the part that is proving difficult. Thanks! ---
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 20, 2017, 4:44pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/2 "2017-07-20T16:44:16Z")
Has anyone succesfully created a GDPR compliant double opt-in campaign? I have tried several ways and none seem to work appropriately or easily. I need to be able for a contact to select wether they opt-in or out, and the date that they have done this. From that, this needs to update custom fields that specify wether they have opted in or out and the date. If they have not completed either action then an email reminder needs to be sent. Preticked tick boxes are not allowed, therefore default values on dropdowns are not either. Updating the date field seems to be the part that is proving difficult. Thanks! ---
**Author:** ![JoPitts](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/jopitts/32/636_2.png) [@JoPitts](https://forum.mautic.org/u/JoPitts)\ **Post date:** [July 21, 2017, 3:05am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/3 "2017-07-21T03:05:07Z")
@eouterbridge , Give us who aren’t in the eu a fighting chance here by giving the 30 second version of GDPR complaince 🙂 Does it go: 1. User fills in details on landing page 2. you send an initial email that then directs the user to opt in to further communications (including date they’ve done so) 3. If the user doesn’t do this after days, you send a reminder directing them to fill in the same details as 2 above. 4. If they don’t fill in the details, you assume they are opted out. or something else? cheers Jo ---
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 21, 2017, 7:04am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/4 "2017-07-21T07:04:14Z")
@JoPitts Pretty close! 1. We have the contacts email address (or other data). 2. We send email with a link to landing page, with form that asks for email address, name etc. At this point they need to select opt-in or opt-out. It has to be a conscious decision so either selected from a drop down or a tick box. Default options are not allowed. 3. Custom fields in Mautic need to update their contact profile with their choice and the date they made their choice. 4. If the form is not filled in a reminder needs to be sent one week later. 5. Data can only be held for a year, so another email will need to be sent 11 months later, asking them for permission again, so this needs to be dependant on that date field. Its the Date field that I can’t seem to get to work how I want. Thanks Emma ---
**Author:** ![petertl](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/petertl/32/511_2.png) [@petertl](https://forum.mautic.org/u/petertl)\ **Post date:** [July 21, 2017, 8:48am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/5 "2017-07-21T08:48:30Z")
> [@24474:@eouterbridge](#): > > 1. We have the contacts email address (or other data). My question: Where does the email address come from? As far as I understood, a double opt-in (1. click checkbox to agree to terms and document the will to signup and 2. email with confirmation link) is GDPR compliant. The point is, how can the process steps be recorded in the contact details. Actions and their timing have to be recorded. So far, so good. But how can you prove that the contact did the actions and not an administrator with access to the database? The line of argument will be very weak. If a contact files a complaint there and the contact insists that he did not register, it gets complicated. Besides this, everything in Mautic is there to implement a transparent DOI process. You will need some hacks - URL parameters, hidden form fields or database triggers - but it will work. ---
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 21, 2017, 9:11am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/6 "2017-07-21T09:11:14Z")
@PeterTL Email addresses right now can be any existing contacts etc, until May 25th 2018. So i’ve set up a custom date field called Opt-In Date. I’ve tried to put this in a form as a hidden field with autofill but it doesn’t seem to work, it doesn’t change in the contact record at all. It is updating this date field that seems to be tricky. If I put it in the form for the contact to fill in, there is always the risk that they select a date in the past. ---
**Author:** ![JoPitts](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/jopitts/32/636_2.png) [@JoPitts](https://forum.mautic.org/u/JoPitts)\ **Post date:** [July 24, 2017, 2:04am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/7 "2017-07-24T02:04:55Z")
@eouterbridge , out of interest, have you tried not making the field hidden, just to see if that makes things work? I realise having it visible isn’t desirable, but as a step in debugging the issue, it might be worth experimenting with. ---
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 24, 2017, 6:49am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/8 "2017-07-24T06:49:58Z")
@JoPitts I have tried making the date field hidden but then it doesn’t update or register any submission to that field. ---
**Author:** ![JoPitts](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/jopitts/32/636_2.png) [@JoPitts](https://forum.mautic.org/u/JoPitts)\ **Post date:** [July 24, 2017, 7:18pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/9 "2017-07-24T19:18:21Z")
@eouterbridge, so if the field _IS_ visible, the autofill works. If it _ISN’T_ visible, then the autofill doesn’t work? How are you hiding the field? ---
**Author:** ![eouterbridge](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/eouterbridge/32/540_2.png) [@eouterbridge](https://forum.mautic.org/u/eouterbridge)\ **Post date:** [July 25, 2017, 6:31am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/10 "2017-07-25T06:31:53Z")
@JoPitts The date field doesn’t respond to autofill at all. ---
**Author:** ![JoPitts](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/jopitts/32/636_2.png) [@JoPitts](https://forum.mautic.org/u/JoPitts)\ **Post date:** [August 15, 2017, 2:19am UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/11 "2017-08-15T02:19:59Z")
@eouterbridge - Sorry been away for a bit. That is awfully odd isn’t it. A quick test gets me the same result. ‘Today’ (sans quotes) doesn’t work., nor does a nice innocuous hard coded reference like ‘06/06/2016’. I think this needs to be surfaced as a separate question. Cheers ---
**Author:** ![ernexto](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ernexto/32/242_2.png) [@ernexto](https://forum.mautic.org/u/ernexto)\ **Post date:** [January 29, 2018, 3:15pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/12 "2018-01-29T15:15:03Z")
Hello all, any news on this subject? ---
**Author:** ![ernexto](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ernexto/32/242_2.png) [@ernexto](https://forum.mautic.org/u/ernexto)\ **Post date:** [January 29, 2018, 3:20pm UTC](https://forum.mautic.org/t/gdpr-compliant-double-opt-in/9008/13 "2018-01-29T15:20:13Z")
We have only 115 days left!!! 🙂 [http://gdprcountdownclock.com/](http://gdprcountdownclock.com/)