Article
Navigating the CAN-SPAM Act: A Comprehensive Guide for Email ...
mailazy.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
It covers B2B email, and you remain liable for what an agency sends for you. SOURCED “Complying with CAN-SPAM does not make you compliant with GDPR, which is consent-based.” On this page: What the law is · Commercial or transactional · The seven requirements · Opt-out mechanics · Penalties · Outside the US · FAQ
CAN-SPAM Is Not GDPR “Complying with CAN-SPAM tells you nothing about your position elsewhere.” The United States (CAN-SPAM) — opt-out. No consent needed before sending.
Opt-out requests must be honoured within 10 business days, and you may not charge a fee or demand information beyond an email address (FTC, retrieved 2026-09-09). SOURCED “The primary purpose test decides whether a message is commercial or transactional.” It covers B2B email, and you remain liable for what an agency sends for you. SOURCED
“It requires honesty about who you are and what the message is, a working unsubscribe honoured within ten business days, and a valid physical postal address in every message.” This guide is written against the FTC's own compliance guidance and its current penalty schedule, retrieved on the dates given below.
CAN-SPAM is opt-out, not opt-in — no prior consent is required to send commercial email (FTC CAN-SPAM Compliance Guide, retrieved 2026-09-09). SOURCED “Opt-out requests must be honoured within 10 business days, and you may not charge a fee or demand information beyond an email address” The primary purpose test decides whether a message is commercial or transactional. SOURCED
“It applies to business-to-business email as well as consumer email, and hiring an agency does not transfer liability.” This guide is written against the FTC's own compliance guidance and its current penalty schedule, retrieved on the dates given below.
It covers B2B email, and you remain liable for what an agency sends for you. SOURCED “Complying with CAN-SPAM does not make you compliant with GDPR, which is consent-based.” On this page: What the law is · Commercial or transactional · The seven requirements · Opt-out mechanics · Penalties · Outside the US · FAQ
The United States (CAN-SPAM) — opt-out. No consent needed before sending. “The European Union (GDPR and the ePrivacy rules) — consent-based for most direct marketing, with a lawful basis required before you send.” Canada (CASL) — consent-based, with express and implied consent defined in the legislation.