Or should they only have an opt-out statement in which you are automatically enrolled unless you accept/check the out-out statement?

Schneider, G. P. (2015). Electronic Commerce (11th ed.). Stamford, CT: Cengage Learning. ISBN: 978-1-285-425436
The Opt-In Statement
Assume you are working for a company that sells music online. The marketing department would like to send e-mails to customers who have purchased music from the Web site. These e-mails would use information about the genres of music customers have purchased in the past and would offer those discounts on new releases in those genres. Discuss your thoughts/feelings about marketing managers using an opt-in statement for permission to send such emails that would appear when customers make their first purchase. Should all businesses/organizations have the opt-in statement? Or should they only have an opt-out statement in which you are automatically enrolled unless you accept/check the out-out statement?

"Get 15% discount on your first 3 orders with us"
Use the following coupon
FIRST15

Order Now