[cflsystems]

The GDPR module is for all checkouts. Regardless if there is an account created or not. The cart still collects and processes personal data even if account is not created. How else you are going to fulfill the order?

Without GDPR one can argue whether a checkbox is really needed. With the checkbox you are asking customer to take action to explicitly agree to something. Without the checkbox - customer does not have to take specific action as the actin of placing the order is consider enough.

GDPR forces the checkbox and action from the user as it makes it mandatory for the user to commit this way; and for the website to give that option.