http://www.wired.co.uk/article/wetherspoons-email-database-g...
Edit: grammar
http://www.wired.co.uk/article/wetherspoons-email-database-g...
Edit: grammar
In which case the appropriate course of action is to simply delete rather than pay some peanuts and act surprised when the DB ends up in the public sphere. I can only commend them. Too many businesses decide to hold on to private identifiable data as though it were a prize bond waiting to mature.
Explicit consent means the company must be able to prove the user consciously agreed to receive marketing. Which is excellent. 1) the burden to prove it lies with the one holding the data and 2) you can't tuck it away in legalese fine print.
I bet a lot of companies are going to do like wheterspoons and just purge the data rather than attempt to make it legit.