The geography split
- US — mostly permissive with opt-out
- EU — legitimate interest with tight guardrails, opt-out mandatory
- UK — soft opt-in for B2B, hard opt-in for consumer
- Canada — CASL, functionally opt-in
What the AI needs to enforce
Geography-aware suppression, opt-out honoring across channels, no retention of behavior data past consent window.
What gets you fined
Cold voice outreach to consumers. Purchased lists in EU. Ignoring opt-outs across channels.