Double Opt-In vs Single Opt-In: What the UAE, UK and US Rules Require for Email

What is the difference between single and double opt-in?

With single opt-in, a person gives their address on a form and is subscribed straight away. With double opt-in, you send that address an email with a confirmation link, and the person is subscribed only after clicking it. Double opt-in is a product decision about proof. No statute we read names it.

Does the UAE, UK or US law require double opt-in?

Rule. The UAE policy is addressed to licensees, which are the telecom operators. Article 5.5 tells them to make sure consent exists before sending their own marketing, and 5.1 asks them to take all practical measures to limit spam on their networks. Practice. We read that as the standard an operator, mail provider or regulator would apply to your list. It is not a direct fine schedule for a small business, and the policy states none. The PDPL does bind the business that holds the data, and it has no legitimate-interest ground in the cases the text lists. The text also lets the executive regulations add cases, and we did not check whether any have been issued, so confirm the current position.

What does a valid consent record hold?

The real duty in the UAE and UK texts is proof. The TDRA policy is the most specific on what a record contains. Practice for a record that would satisfy it and the PDPL and UK GDPR tests:

• Who: the name and email address, as typed by the person.
• When: the date and time of the agreement, in one time zone you state.
• What they saw: the exact words next to the box or button, and the version of the form. A screenshot or saved text of the form on that date is enough.
• Where: the page or form it came from, and the IP address if it was an online sign-up, as the TDRA policy lists.
• What changed after: the date of any unsubscribe, so the address is not mailed again.

Why would you still use double opt-in?

Practice. It fixes two things single opt-in cannot. It proves the address belongs to the person who clicked, which stops typos and stops someone signing another person up. And it adds a second timestamped event to your record. The cost is a lost step: anyone who does not open the confirmation email is never subscribed, so your list is smaller. We have no data on how much smaller, and you should not trust a vendor's figure without its source.

What does MAJ Leads do about consent?

MAJ Leads sends newsletters to your own leads, under your sender name. It records a reason each address may be emailed: a form sign-up, an existing customer, an import you confirmed, an enquiry (answers to that enquiry only, never marketing), or a UK soft opt-in that an admin has attested. When you import a list you must tick a sentence saying the people agreed to receive your emails and that you can show when and how. Every campaign email carries an unsubscribe link and the one-click unsubscribe header mail providers expect, and an unsubscribed address is skipped.

What it does not do: it has no public sign-up page and does not send a confirmation email. If you want double opt-in, run it in your form tool, and import the confirmed addresses with your record of when they confirmed. Set up your sending domain too: see DMARC setup and the bulk sender rules. For WhatsApp, the rules differ: see WhatsApp opt-in.

See how it works and pricing.