I was wondering what the legality is in the following situation.

User signs up to site A. Just above the submit button user is notified that signing up to site A will also sign user up to site B (which they may not ever use). They have no choice.

Site A is a blog and site B is an e-commerce site, both 'owned' by the same person.

Is this, firstly, legal? If so, is it advised? Or should the user always have the option to choose whether they want to signup or not?

  • What do you mean they have no choice? They can choose not to sign up for A, correct? Is A so compelling or necessary and B so offensive that the law should require separation?
    – jqning
    Dec 21, 2015 at 13:53
  • To give some context. I have a blog site. I want people to register to this blog site as per usual. When they register they will also be signed up to my e-commerce website. An email will notify them of this. My question is if this is legal. MUST a user have the option not to be signed up to my secondary site?
    – Hemm K
    Dec 21, 2015 at 17:00

2 Answers 2


I don't know what it means to register to a blog or sign up to a website, but I assume you are going to be sending these people email. If so, the CAN-SPAM Act is implicated. Sending people unsolicited can be not only annoying but also illegal.

If this is question is about sending people emails, make sure you provide an opt-out link in the emails that you send and honor the requests quickly. Here is some information which might help: CAN-SPAM Act: A Compliance Guide for Business.

Also, if kids are targets of your site, COPPA is implicated if you are collecting information about the kids which I mention only because "registering" and "singing up" usually means providing information.

All that said, if this is as literal as it sounds, and people are just providing some information which will be used as a credential to access your pages, there is no law against extending the reach of the permission.

  • See other answer for info re: the Privacy and Electronic Communications Regulations for the EU and UK. These are opt-in rules as opposed to the US's opt out rules. (And, as stated, current customers fall under a "soft opt in.") So yeah, you need to be careful about what boxes are being ticked and what the people ticking the boxes think they are signing up for!
    – jqning
    Dec 23, 2015 at 3:24

If the contact details will be used for email marketing from the e-commerce website then yes, there would be a breach of the Privacy and Electronic Communications Regulations.

In a nutshell the regs state that you must have prior consent to send marketing emails to individuals. It is unlikely that you could equate wanting notification of blog entries with wanting associated marketing emails.

An opt-in is arguably your only reliable way of staying the right side of the regs.

As an aside: if someone is signing up to buy something from an e-commerce site it is acceptable to have an opt-out option for marketing emails (i.e. you do not have to rely on an explicit opt-in). This is often referred to as soft opt-in.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .