Privacy laws such as the GDPR require a lawful basis for processing personal data. When data privacy settings are enabled in HubSpot, contacts gain a legal basis property, and forms can capture consent alongside subscription choices. The legal basis can also be set by import, workflow or integration.
Legal basis and subscription types answer different questions. Legal basis says why you may hold and process the contact’s data at all. Subscription types say which kinds of marketing email the contact has agreed to receive. A contact can have a valid legal basis but be unsubscribed from newsletters, and the reverse should not happen.
Problems usually come from gaps. Forms that collect data from people in regulated regions without a consent option. Imports that create contacts with no legal basis recorded. Workflows that email contacts whose basis is missing. Each gap is small on its own, but together they make it hard to show a regulator or a customer how you handle data.
Decide, with legal advice, which basis applies to each way contacts enter the portal, and set it automatically at that point. Then check regularly for contacts with no basis or no subscription status. This page explains how HubSpot stores the information; it is not legal advice.