- How and where to collect email addresses. - Consent requirements and how they are documented. - Frequency and content of email communications. - Procedures for handling opt-outs and unsubscribes. - Security measures for storing and processing email data.