Definition
Email CAN-SPAM requirements are the rules set out in the United States CAN-SPAM Act that govern commercial email messages. CAN-SPAM stands for Controlling the Assault of Non-Solicited Pornography and Marketing. The law requires truthful header information, clear sender identification, a valid physical address, and a working opt-out mechanism, among other obligations.
How It Works
The CAN-SPAM Act applies to commercial messages, which it defines broadly as any email whose primary purpose is to advertise or promote a product or service. To comply, a sender must ensure the "from," "to," and routing information is accurate, the subject line reflects the content, and the message is identified as an advertisement where required. Every commercial email must also include the sender's physical postal address and a mechanism for recipients to opt out.
Opt-out is a central obligation. Recipients who unsubscribe must be removed from future sends promptly, and senders must honor opt-out requests for a defined period. Unlike some other laws, CAN-SPAM does not generally require prior consent before sending, but it does require senders to stop when asked. The requirements overlap with the standard disclosures described in footer compliance practices.
Requirements
- Accurate header and routing information.
- A subject line that is not misleading.
- Identification of the message as an advertisement where applicable.
- A valid physical postal address for the sender.
- A working opt-out mechanism honored promptly.
Example
A U.S. retailer sends a promotional email that identifies the sender accurately, uses an honest subject line, includes its street address in the footer, and provides a one-click unsubscribe link. When a recipient opts out, the address is suppressed within the required window. The campaign meets CAN-SPAM requirements and reduces the risk of penalties.
Was this useful?
Related Glossary Terms
Abuse Complaint
An abuse complaint is a report from a recipient who marks an email as spam, which negatively affects sender reputation and deliverability.
Anonymized Data
Anonymized data is email subscriber or interaction data that has been stripped of personally identifiable information so individuals cannot be re-identified.
Australia Spam Act 2003
The Australian Spam Act 2003 bans unsolicited commercial email, requiring consent, accurate sender information and a clear, working unsubscribe facility on every message.
Brazil LGPD Email Marketing
Brazil's LGPD regulates personal data use for marketing, requiring a legal basis such as consent or legitimate interest, plus transparency and clear opt-out in email campaigns.
CAN-SPAM Act
The CAN-SPAM Act is a US law that sets rules for commercial email. It requires accurate subject lines, a physical address, a clear opt-out mechanism, and prompt processing of unsubscribes. Violations can result in penalties up to $51,744 per email.
Canada CASL Guide
CASL (Canada's Anti-Spam Legislation) requires express or implied consent, clear identification, and a functioning unsubscribe mechanism before sending commercial electronic messages to Canada.
Frequently Asked Questions
Generally no, it does not require prior consent, but it does require honoring opt-out requests and including mandatory disclosures.
It applies to commercial email sent to or from the United States, though senders reaching other regions must also consider CASL and GDPR.
Violations can result in significant penalties per email, enforced by regulators, so compliance should be treated seriously.