To build a GDPR-compliant email list, use [double opt-in](). This involves sending a confirmation email to the new subscriber, who must then click a link to verify their subscription. This method ensures that the consent is deliberate and verifiable. Additionally, keep a record of when and how users consented to receive your emails.