Currently, when you click the subscribe button in the privacy policy email, the contact status is immediately changed to subscribed. However, the full Double Opt-In model should be used here if it is selected in the account seetings