Hi,
I am interested in this also.
1) The most important seems to have granted consent by users to use cookies.
The lead must give a clear affirmation action to accept cookies.
–> It could be possible with a cookie banner.
It could be good enough to have a button to accept or deny. There are à lot of plugin for cookies banner (or use focus items in mautic?). WordPress admin place this button inside banner. It could be the first step to be GPDR complient
2) It must be possible for the lead to change their preferences.
It should be possible with the preference page in mautic.
A link to preference could be enough.
Regards,
Benjamin