One of the primary requirements of GDPR is obtaining explicit consent from individuals before sending them marketing emails. Consent must be freely given, specific, informed, and unambiguous. This often means using where users actively check a box to agree to receive emails. Pre-checked boxes or implicit consent mechanisms are not compliant with GDPR.