Obtaining consent is crucial for compliance. Under GDPR, for example, consent must be freely given, specific, informed, and unambiguous. This often means using a double opt-in process, where subscribers confirm their subscription through a follow-up email. Similarly, CAN-SPAM requires a clear opt-out option in every email, ensuring that subscribers can easily withdraw their consent at any time.