Why It Matters
Fines for violating email laws aren't trivial. CAN-SPAM penalties reach up to $51,744 per email. GDPR fines can hit 4% of annual global revenue. CASL carries penalties up to $10 million per violation for businesses. Beyond the legal risk, non-compliant sending practices destroy your sender reputation and get you blocklisted by ISPs.
How It Works
Each regulation has its own requirements, but the core principles overlap: get consent before emailing people, identify yourself clearly, and make it easy to opt out. CAN-SPAM requires a physical mailing address and a working unsubscribe link that's honored within 10 business days. GDPR demands explicit opt-in consent and the ability for recipients to access or delete their data. CASL is the strictest — it requires express consent before you send the first email.
Quick Tips
- Include your physical address and an unsubscribe link in every commercial email — no exceptions
- Keep records of when and how each subscriber gave consent; you'll need proof if challenged
- Process unsubscribe requests within 24 hours, not the 10-day maximum — subscribers who can't leave easily will mark you as spam instead