EU GDPR, and ePrivacy legislation
Someone had already wrote about (the EU) GDPR.
I want to add, if I I remembered it correctly an opt-in by default was not OK by the EU.
Some information about the proposed: ePrivacy legislation, and GDPR.
ePrivacy : Proposal for a Regulation on Privacy and Electronic Communications
https://ec.europa.eu/digital-single-market/en/news/proposal-regulation-privacy-and-electronic-communications
EU about:
"Rules for business and organisations"
https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations_en
"Rules for business and organisations" -> "Dealing with (EU) citizens"
https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/dealing-citizens_en
Non-EU Website: digiday.com
"The winners and losers of the EU’s new ePrivacy law"
https://digiday.com/media/winners-losers-eus-new-eprivacy-law/