The CAN-SPAM Act (Controlling the Assault of Non-Solicited Pornography And Marketing) in the United States
The GDPR (General Data Protection Regulation) in the European Union
The CCPA (California Consumer Privacy Act) in California, USA
Freely given, specific, informed, and unambiguous
Obtained through a clear affirmative action (e.g., checking an opt-in box)
Clear Identification: Emails must be clearly identified as commercial in nature.
Accurate Sender Information: The sender's name, email address, and physical address must be accurate and clearly displayed.
Honest Subject Lines: Subject lines must accurately reflect the content of the email.
Opt-Out Mechanism: Emails must include a clear and conspicuous opt-out mechanism, allowing recipients to unsubscribe from future emails easily. Unsubscribe requests must be honored within 10 business days.
Valid Reply-To Address: The email must include a valid reply-to address that remains operational for at least 30 days after the email is sent.
Harvesting Email Addresses: Collecting email addresses through automated means or from third-party sources without consent.
Misleading Information: Using deceptive headers, subject lines, or content.
Third-Party Lists: Purchasing, renting, or using third-party email lists without verifying that recipients have provided consent.
