Obtaining consent is crucial for compliance. Under the GDPR, consent must be freely given, specific, informed, and unambiguous. This usually involves using a double opt-in method where users confirm their subscription via email. The CAN-SPAM Act requires a clear and conspicuous explanation of how the recipient can opt out of receiving emails in the future. Always make sure to keep records of consent as proof of compliance.