Obtaining consent is crucial in email marketing to comply with GDPR and other privacy laws. Consent must be freely given, specific, informed, and unambiguous. This means that users need to actively opt-in to receive emails, and they should be fully aware of what they are signing up for. Pre-ticked boxes and default opt-ins are not acceptable.