1. Obtain explicit consent from recipients before sending emails. 2. Provide easy opt-out mechanisms. 3. Be transparent about data usage. 4. Implement strong data protection measures. 5. Maintain accurate records of consent. 6. Appoint a Data Protection Officer (DPO) if required.