Skip to content
    Back to glossary
    Compliance

    CAN-SPAM Act

    By Carlos Gil, Founder & Editor, The Best Network · Updated

    US law requiring marketing emails to include a physical address and a working unsubscribe link.

    Less strict than GDPR, CAN-SPAM does not require opt-in consent. But it does require: accurate "from" and subject lines, identification as an ad (where applicable), a physical postal address, a clear unsubscribe mechanism, and honoring opt-outs within 10 business days. The FTC says each separate email in violation can draw penalties of up to $53,088 (checked October 2026).

    Sources

    Related terms

    GDPR

    EU data protection law. Marketing email to people in the EU needs a lawful basis: usually consent, sometimes legitimate interest, with the ePrivacy soft opt-in covering existing customers.