I posted this on a support forum but thought I should post it here.
A quick overview, I'm quite unsatisfied with the recent function of express or implied permission. It actually do anything and doesn't allow any interaction in any way except for seeing it. My main recommendation is to make this an optional function to define contacts further when sending an email (i.e. a tick box or drop down which is "only send to contacts with express permission").
I have other concerns with this feature which I will list below:
1) It's is not really trackable, to see if someone has clicked the button to give express permission you have to physically keep going back and checking. Also on the reporting of the GDPR consent email itself you can't see this data.
2) It is not definable at all. You have to physically make it so by making the contacts in these fields tags and then constantly updating them.
3) It doesn't actually supply proof of consent. There is no logged data on things like date or method through which this consent was gained.
4) It still means we hold data on people who we don't have permission from, it just puts them in a list of people who we don't have permission to hold this data.
In summary I don't really see how people are expected to use this tool as it is and how it helps with issues around GDPR at all. Thank you for reading my feedback and I look forward to hearing back from you on this.