CAN-SPAM Compliance

What is the CAN-SPAM Act?

The CAN-SPAM Act (Controlling the Assault of Non-Solicited Pornography and Marketing Act) is a U.S. federal law enacted in 2003 that establishes rules for commercial email communications. It applies to all email marketing sent to the United States, including transactional and promotional messages. The law is enforced by the Federal Trade Commission (FTC) and requires businesses to follow specific requirements when sending marketing emails.

While CAN-SPAM is a U.S. law, the principles are widely adopted internationally. Canada has CASL (Canadian Anti-Spam Legislation), which has stricter requirements, and the EU has GDPR. All three laws share common principles: transparency, consent, and respect for recipient preferences.

Our Compliance Commitment

Get Email Database is fully committed to CAN-SPAM compliance. All our operations, data sourcing, and customer support are designed to help you maintain compliance:

• Opt-In Data: Our email lists are built from verified, opt-in sources only. We never include addresses harvested illegally or obtained without consent.
• Regular Verification: We continuously verify and validate email addresses to ensure data quality and compliance with anti-spam regulations.
• Transparent Sourcing: We document the sources of all our data and maintain records of consent for regulatory transparency.
• Education & Support: We provide compliance resources and best practices to help customers send emails responsibly.
• Monitoring & Enforcement: We monitor our platform for violations and take action against customers who misuse our data.

CAN-SPAM Requirements: 7 Key Rules

The CAN-SPAM Act requires you to follow these seven key requirements for all commercial email messages:

• No False Headers: Your "From," "To," "Reply-To," and routing information must be accurate and not deceptive. You cannot disguise the sender's identity or falsify header information.
• No Deceptive Subject Lines: Your subject line must not mislead recipients about the message's content or the sender's identity. The subject should be honest about what the email offers.
• Identify as Advertisement: You must clearly identify the message as an advertisement. Including "ADV:" or similar indicators helps recipients understand they're receiving promotional content.
• Include Physical Address: Your email must include your valid physical postal address. This can be your current business address, office location, or PO box, but must be legitimate and locatable.
• Honor Opt-Outs Within 10 Days: You must include a clear, prominent unsubscribe link in every email. When recipients opt out, you must stop sending them emails within 10 business days.
• Monitor Third Parties: If you use email service providers, marketing agencies, or contractors, you remain responsible for their compliance. Ensure all vendors follow CAN-SPAM rules.
• Penalties for Violations: Each violation can result in penalties up to $50,120 per email (as of 2026). Willful violations may increase penalties and invite legal action by the FTC or state attorneys general.

How Our Data Supports Compliance

Get Email Database provides verified, permission-based email data specifically designed to support CAN-SPAM compliance:

• Opt-In Sourcing: All email addresses in our database come from confirmed opt-in sources. Recipients have actively chosen to receive communications, supporting your compliance posture.
• High Delivery Rates: Our verified data ensures higher deliverability and lower bounce rates, reducing the risk of sending to invalid addresses.
• Accurate Contact Information: We maintain updated records with professional titles, company information, and email addresses to ensure your messages reach the right people.
• No Lists of Non-Consented Addresses: We explicitly do not sell harvested lists, purchased from unethical brokers, or addresses from opt-out databases.
• Compliance Documentation: We provide records and documentation of our data sourcing practices to support your compliance efforts.
• Regular Verification Updates: We continuously update and verify our data to maintain quality and remove addresses that bounce or request removal.

Your Responsibilities as a Buyer

While Get Email Database provides compliant data, you as the email sender bear the ultimate responsibility for compliance with CAN-SPAM. When you purchase and use our email lists, you must:

• Include Accurate Headers: Ensure your "From" address, reply-to address, and subject line are truthful and not deceptive.
• Identify as Marketing: Clearly mark messages as advertisements or marketing communications if required.
• Provide Physical Address: Include your business's valid mailing address in every email.
• Honor Unsubscribe Requests: Process all opt-out requests within 10 business days and maintain opt-out lists.
• Use Legitimate Email Service Providers: Send through reputable ESP platforms that enforce CAN-SPAM compliance rules.
• Monitor Bounce Rates: Remove addresses that bounce repeatedly to avoid sending to invalid addresses.
• Keep Records: Maintain records of your email campaigns and compliance efforts in case of FTC inquiry.

Best Practices for Email Marketing

Beyond the legal minimum, follow these best practices to maximize engagement and minimize spam complaints:

• Permission-Based Sending: Only send to recipients who have explicitly opted in to receive your messages. Avoid purchased or harvested lists from untrusted sources.
• Clear Unsubscribe Links: Include a prominent, easy-to-use unsubscribe link in every email. Make it obvious so recipients don't mark you as spam.
• Honest Subject Lines: Write subject lines that accurately describe your email content. Avoid clickbait, urgency tactics, or misleading claims.
• Segment Your Lists: Send targeted emails to specific audience segments based on interests, company size, or industry to improve relevance.
• Monitor Delivery Metrics: Track bounce rates, spam complaints, and list growth to identify deliverability issues early.
• Authenticate Your Email: Use SPF, DKIM, and DMARC authentication to improve deliverability and protect your sender reputation.
• Provide Value: Send relevant, valuable content that recipients actually want to receive. This reduces spam complaints and improves engagement.
• Update Lists Regularly: Remove inactive addresses, bounced emails, and confirmed opt-outs to maintain list quality.

GDPR & International Compliance

CAN-SPAM applies to US-based email marketing, but if you send email internationally, you must comply with other regulations:

• GDPR (Europe): The EU's General Data Protection Regulation has stricter requirements than CAN-SPAM, including explicit opt-in consent and data processing agreements. GDPR violations can result in fines up to 20 million euros or 4% of global revenue.
• CASL (Canada): Canada's anti-spam law is even stricter than CAN-SPAM, requiring explicit opt-in consent before sending marketing emails. Violations can result in fines up to 1.5 million CAD for individuals and 50 million CAD for corporations.
• Brazil & Argentina: Many countries have adopted GDPR-like standards. The safest approach is to follow the strictest applicable regulation for your audience.
• Get Email Database Compliance: Our data sourcing and practices align with GDPR, CASL, and CAN-SPAM standards, so your purchased lists can be used compliantly across multiple regions.

Reporting Violations

If you receive unsolicited commercial email that violates CAN-SPAM, you can report it to the FTC:

• Report to the FTC: Forward unwanted commercial emails to spam@uce.gov. The FTC uses these reports to identify and pursue violators.
• Report to the ISP: Contact your email provider's abuse team to report spam. Most email providers have dedicated anti-spam divisions.
• Use Email Filters: Modern email clients include spam filters. Marking emails as spam helps train filters and alerts your provider to potential violations.
• Legal Recourse: While individuals cannot sue under CAN-SPAM, state attorneys general and the FTC can pursue enforcement actions and damages.

Contact Us for Compliance Help

Have questions about CAN-SPAM compliance or how to use Get Email Database data responsibly? Our team can help:

• Email: compliance@getemaildatabase.com
• Mailing Address: Get Email Database Compliance Team, 1234 Business Ave, Suite 500, San Francisco, CA 94102
• Response Time: We respond to all compliance inquiries within 10 business days.