Content Notify aims to be as compliant with as many regulations as possible, including, but not limited to: GDPR/GDPR+K, COPPA, LGPD, CCPA and CPRA, and CASL. That being said, no plugin, including Content Notify, can ensure total regulatory compliance alone for an entire website.
Regardless, as a plugin, Content Notify’s compliance currently extends to:

• The person must accept the website’s privacy policy when setting up a new subscription using Content Notify.
• The date of when the person verified their subscription is stored in the database and shown when viewing/editing a subscription.
• A reply address is always set so that the user can contact the owner of the site that is sending out alerts using Content Notify.
• A user can unsubscribe via a link at the bottom of every alert associated with that subscription created using Content Notify.
• Where added in Subscriptions > Settings > Sending, legal information, such as company name, registration, number, address, etc. is included at the bottom of every email sent using Content Notify.
• If the subscriber requests a copy of their data through WordPress’s ‘Export Personal Data’ function on the host website, any information that forms part of that request, as stored by Content Notify, will be provided with this data.
• If the subscriber requests their data be deleted through WordPress’s ‘Erase Personal Data’ function on the host website, any information that forms part of that request, as stored by Content Notify, will be deleted with the request.

Better and more thorough compliancy with these regulations, and new regulations, will come in future plugin releases.

For more information on compliancy when sending emails, please refer to this helpful guide.