CAN-SPAM
A U.S. federal law enacted in 2003 that regulates commercial email. It requires senders to provide accurate identity information, clearly label messages as advertisements, and include a functioning unsubscribe mechanism in every email. Violations carry substantial per-message financial penalties.
Core Facts
Timeline (last 90 days)
The US CAN-SPAM Act permits cold email but requires an opt-out mechanism and truthful sender information; the EU GDPR sets stricter legal-basis requirements for personal data processing, and sending marketing emails to personal inboxes typically requires consent or a legitimate-interest assessment.
The U.S. CAN-SPAM Act requires commercial emails to include accurate sender information and a valid unsubscribe mechanism, and to honor unsubscribe requests within 10 business days of receipt.
Data privacy regulations such as GDPR and CCPA, as well as anti-spam regulations such as CAN-SPAM, require companies to be able to demonstrate that explicit user consent was obtained at a specific point in time and to reconstruct communication records.
The EU's GDPR places strict restrictions on sending commercial emails to individuals without explicit consent.
CAN-SPAM is a U.S. commercial email regulatory act passed in 2003, requiring senders to provide truthful identity information, clearly label the advertising nature of the email, and provide a functional opt-out mechanism.
Regulations such as GDPR, CCPA, CAN-SPAM, and PECR impose restrictions on the collection of personal data and unsolicited commercial communications; even bulk collection of publicly visible contact information for commercial purposes may constitute a violation in certain jurisdictions.
All Facts (6)
The U.S. CAN-SPAM Act requires commercial emails to include accurate sender information and a valid unsubscribe mechanism, and to honor unsubscribe requests within 10 business days of receipt.
65%UnverifiedThe US CAN-SPAM Act permits cold email but requires an opt-out mechanism and truthful sender information; the EU GDPR sets stricter legal-basis requirements for personal data processing, and sending marketing emails to personal inboxes typically requires consent or a legitimate-interest assessment.
50%UnverifiedData privacy regulations such as GDPR and CCPA, as well as anti-spam regulations such as CAN-SPAM, require companies to be able to demonstrate that explicit user consent was obtained at a specific point in time and to reconstruct communication records.
50%UnverifiedThe EU's GDPR places strict restrictions on sending commercial emails to individuals without explicit consent.
50%UnverifiedCAN-SPAM is a U.S. commercial email regulatory act passed in 2003, requiring senders to provide truthful identity information, clearly label the advertising nature of the email, and provide a functional opt-out mechanism.
50%UnverifiedRegulations such as GDPR, CCPA, CAN-SPAM, and PECR impose restrictions on the collection of personal data and unsolicited commercial communications; even bulk collection of publicly visible contact information for commercial purposes may constitute a violation in certain jurisdictions.
50%