Even if it makes things overly complicated sometimes, I like the EU style that forces companies to make people actively confirm their consent, and puts the 'inform' part of 'informed consent' into the company's responsibility.