I noticed on my own site and also here, that the Newsletter checkbox is now back to pre-ticked, like before GDPR. 
 

 

 

This site seemed a bit confused about when I was signed in or out!

 

"Just when I was Signed Out, they Signed me back in."
 

 

It's a setting. ACP > Members > Notifications > Newsletters.

 

EDIT: Also bare in mind this site uses two installs using OAuth - you could potentially be signed out in one, but still signed in on another.

Thanks Ryan. If you cast your mind back to when GDPR was coming out and IPS had a fairly large update. It was changed in order to be compliant.

I never noticed until now that it had somehow got reverted back at some point in the updates since to being ticked by default, hence undoing the compliance change previously made. 

(Since GDPR day, its been considered unlawful in the EU, UK plus any other regions who have instituted similar legislation to have the box already ticked (known as Opt Out). It has to be unticked by default (so you have to clearly OPTed IN which the software records) because newsletters are not transactional emails.)

Update: It was changed in 4.2.7, the GDPR release, and documented here: