What are lawful grounds for keeping suppression lists?

Suppression lists are kept under the lawful basis of compliance. Regulations such as GDPR, CAN SPAM, and CASL require you to honor unsubscribe requests and prevent future emailing. To do this you must retain a hashed or pseudonymized record of the address so you can identify and block it if it reappears. This is a legitimate interest grounded in legal obligation not marketing use.

Was this answer helpful?

Thanks for your feedback!