# AI告诉公司，如果用户可以取消勾选，预先勾选的营销邮件选择加入框符合GDPR

- **ID:** `legal/gdpr-email-consent-checkboxes`
- **领域:** legal
- **类别:** regulatory_barrier
- **错误码:** `GDPR_ART7_PRE_TICK`
- **验证级别:** ai_generated
- **修复率:** 85%

## 根因

GDPR第7(2)条和电子隐私指令要求明确、自由给予且毫不含糊的同意；预先勾选的复选框被明确禁止，因为它们不构成'主动'同意。

## 版本兼容性

| 版本 | 状态 | 引入 | 弃用 |
|------|------|------|------|
| gdpr_regulation | active | — | — |
| eprivacy_directive | active | — | — |
| ico_guidance | active | — | — |

## 解决方案

1. ```
   Change the opt-in to an unchecked checkbox with a clear, affirmative action: user must actively tick it. Example: <input type='checkbox' id='marketing' name='marketing' value='yes'> <label for='marketing'>I consent to receive marketing emails</label>
   ```
2. ```
   Implement a double opt-in process: user ticks unchecked box, then receives confirmation email with link to verify. This provides auditable proof of consent.
   ```

## 无效尝试

- **Adding a 'Unsubscribe' link in the footer instead of fixing the opt-in process** — Unsubscribe is for existing subscribers, but the initial consent collection method is still non-compliant; supervisory authorities (e.g., CNIL, ICO) fine for the collection method itself. (70% 失败率)
- **Using a single opt-in checkbox labeled 'I agree to receive marketing' that is pre-checked** — Pre-ticked checkboxes are explicitly banned; this is a common but incorrect shortcut that violates GDPR Article 7(2). (90% 失败率)