NO

As of 13 August 2026, AI cannot check your email consent process against UK GDPR.

This still needs a person who signs their name to it.

Can you do it?

15 minutesto a draft.

n/ait cannot be self-verified.

Cost, all in£0

Skill neededpower-user

Who has to check ita professional

What the alternative costsNo comparable professional-service price is provided in the supplied tool data; a serious case needs a UK data protection solicitor or suitably qualified data protection specialist.

If this goes wrong, you continue sending marketing emails without valid consent and your organisation carries the resulting legal and operational consequences.

What to actually do

  1. Hand it to a person

    The route this page recommends

    Someone with a licence or accountable authority has to sign this before it counts.

  2. Use a tool built for this

    Second choice

  3. Do it yourself

    The distant third

    A chat interface gets you a draft, but you cannot verify it yourself. That is the catch.

    How to actually do it

    1. Open the ICO guidance on direct marketing and your current privacy notice, then create a working folder containing the consent form, sign-up screens, confirmation email, unsubscribe wording and sample campaign footer.
    2. Export or describe the CRM fields that record consent, including the date, source, wording shown, permission given, withdrawal status and any changes to the record, removing names and email addresses.
    3. Write down how each contact entered the database, including purchases, events, website forms, third-party lists, referrals and any consent obtained by another organisation.
    4. Paste the anonymised materials and process description into a chatbot with the supplied prompt, asking it to separate clear evidence, possible gaps, missing information and matters needing professional confirmation.
    5. Compare every alleged gap with the current ICO guidance and the exact wording and records in your folder, correcting the chatbot's summary where it misquotes or assumes a fact.
    6. Send the evidence pack and unresolved questions to a UK data protection solicitor or qualified data protection specialist before relying on the result to continue or change email marketing.

    Prompt

    Act as a structured review assistant, not a solicitor. Review the UK email marketing consent process described below against the UK GDPR, the Privacy and Electronic Communications Regulations and current ICO guidance as far as you can state them reliably. Do not claim that the process is legally compliant. Separate your response into: 1) facts clearly supported by the supplied materials, 2) possible compliance gaps, 3) questions that need answering, 4) evidence or records that should be located, 5) points that require confirmation by a UK data protection solicitor or qualified data protection specialist, and 6) a practical evidence checklist. Examine consent wording, affirmative action, pre-ticked boxes, separate marketing permissions, identification of the sender, withdrawal and unsubscribe arrangements, the record of consent, data sources, third-party sharing, profiling, children or vulnerable people, and the difference between email consent and any other lawful basis. Quote the relevant wording from my materials when identifying a gap. Do not invent facts, legal provisions, dates or regulator statements. If information is missing, say exactly what is missing. Do not process or reproduce unnecessary personal data. Materials: [PASTE YOUR CONSENT FORMS, SIGN-UP FLOW, PRIVACY NOTICE, EMAIL FOOTER, CRM FIELD LIST, RECORD-KEEPING DESCRIPTION, DATA-SOURCE DESCRIPTION AND CAMPAIGN PROCESS HERE]

    Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.

What it gets wrong

What makes this a NO: legal accountability, regulated advice and judgement under ambiguity.

How we scored this

Five axes, each scored nought to two by hand: ten means AI carries the task cleanly, and the thresholds that turn a total into YES, PARTLY or NO are published in the methodology. Each axis name links to its definition.

AxisScore (0–2)
Output1
Inputs1
Verification0
Liability0
Effort delta1
Total3 / 10

The methodology and its thresholds are published in full.

FAQ

Can ChatGPT check if my email consent is GDPR compliant?
It can organise your evidence and flag possible gaps in the consent wording, sign-up journey and CRM records. It cannot confirm legal compliance, and the result is not professional advice; a serious case needs a UK data protection solicitor or qualified data protection specialist.
What should I give AI to check my email consent process?
Give it anonymised copies of the sign-up journey, consent wording, privacy notice, confirmation messages, unsubscribe process, CRM consent fields and the source of each contact. Include how consent is recorded and withdrawn, but remove names, email addresses and other unnecessary personal data.
Can AI tell me if I can email my existing customers?
It can list the facts and questions that affect the analysis, such as what was sold, what marketing permission was given and how the emails relate to the original transaction. It cannot make the final legal decision, so ask a UK data protection solicitor or qualified data protection specialist before sending.
Is AI-generated GDPR compliance advice legally safe?
No. A model can miss facts, rely on outdated guidance or state an uncertain legal interpretation confidently, while your organisation remains responsible for its marketing and data handling. Treat it as a preparation tool, not professional advice.

Nearby answers

All Email & CRM campaigns rulings

Assessed by gpt-5.6-luna (gpt-5.6-luna) on 2026-08-13, second-checked by an independent model. Wrong somewhere? Email [email protected] and it gets re-checked.

The newsletter

AI news, new answers and product picks, straight to your inbox.