GTM Toolkit

Opt-in vs opt-out

Opt-in vs opt-out describes two consent models for contacting someone: opt-in requires permission before the first message, while opt-out allows the first message but requires an easy, honored way to stop future ones.

The difference between opt-in and opt-out sits at the center of most cold outbound compliance questions, and it's really a question about when consent has to happen. An opt-in model requires permission before the first message goes out. An opt-out model allows the first message without prior permission, but requires the sender to make stopping easy and to honor that request once it arrives.

US CAN-SPAM runs on the opt-out model: cold B2B email is generally permitted without prior consent, as long as sender identification is accurate, subject lines aren't deceptive, and opt-outs get processed promptly. Regimes closer to GDPR lean toward requiring a legal basis, sometimes legitimate interest, sometimes explicit consent, before the first message, and that basis varies by jurisdiction instead of working as one universal rule.

The distinction also shapes how a list gets built, not just how a message reads. A team working in an opt-out jurisdiction can prospect broadly and rely on suppression once someone asks to stop. A team working in an opt-in jurisdiction needs to establish a legal basis before the first send, which moves the consent question earlier in the funnel, back to how and where the list was sourced in the first place.

In practice

A single outbound program can be workable in one jurisdiction and questionable in another purely because of which consent model applies, which is why teams running outbound across US and EU lists generally treat this as a per-list, per-region question rather than one blanket policy.

What people get wrong

People assume there's one global standard, usually whichever one they learned first. There isn't. The opt-out model that makes US cold email workable doesn't transfer cleanly to every jurisdiction, and treating one region's rules as the default for every list is how outbound programs end up out of step with where their contacts actually sit.

Related terms
Where we use this
Updated July 26, 2026

Ready to engineer your GTM motion?

Tell us how your motion runs today. We'll show you what we'd engineer.

Contact us