Data subjects cannot consent to inadequate technical and organizational measures, in the specific case to unencrypted emails.
https://www.dataprotect.at/2019/04/16/datensicherheitsma%C3%9Fnahmen-sind-nicht-disponibel/
[protecting people by good design, solid security, efficient processes and trusted services]