Spam Laws: Do They Apply To Business Emails?

If your business uses email marketing, you should be aware of the laws in place to protect consumers from spam. In the US, the CAN-SPAM Act sets the rules for commercial email and gives recipients the right to stop receiving emails from businesses. The Act covers all commercial messages, including business-to-business emails, and applies to all US businesses that send commercial emails or employ third-party services to send emails on their behalf. While the CAN-SPAM Act doesn't prohibit email advertising, it does ban certain fraudulent practices, such as using false or misleading identity information or deceptive subject lines. Marketers must clearly label messages as advertisements, provide a way to opt out of receiving future messages, and include a valid postal address.

Do spam laws apply to B2B emails?

The CAN-SPAM Act is a US law that establishes the rules for commercial email and commercial messages. It requires that all commercial messages are clearly labelled as such, that recipients are given a way to opt out of receiving future messages, and that a valid physical postal address is provided. The law applies to all US businesses that send commercial emails, including B2B emails, and non-compliance can result in significant fines.

The CAN-SPAM Act covers all commercial messages, defined as "any electronic mail message the primary purpose of which is the commercial advertisement or promotion of a commercial product or service". This includes email that promotes content on commercial websites. The law makes no exception for business-to-business emails, meaning that all emails must comply with the law, regardless of whether they are sent to consumers or other businesses.

There are a number of specific requirements that must be met to comply with the CAN-SPAM Act. These include:

• Not using false or misleading header information, such as the "From", "To", "Reply-To", and routing information.
• Not using deceptive subject lines. The subject line must accurately reflect the content of the message.
• Clearly disclosing that the message is an advertisement. This can be done in a number of ways, such as using the words "advertisement" or "solicitation" in the body of the email, or using phrases like "This is a great offer for you".
• Providing a valid physical postal address. This can be a street address, a post office box, or an address with a registered commercial mail-receiving company.
• Including a clear and conspicuous mechanism for opting out of receiving future emails, and honouring opt-out requests promptly.

It is important to note that even if a business outsources its email marketing efforts to a third party, it is still responsible for ensuring that the campaigns being sent on its behalf are compliant with the CAN-SPAM Act.

In addition to the CAN-SPAM Act, there are other laws and regulations that businesses should be aware of when engaging in email marketing, such as the GDPR in the EU, and the CASL laws in Canada. These laws have similar requirements to the CAN-SPAM Act, such as obtaining consent from recipients and providing a way to opt out of receiving future messages.

What are the requirements for commercial messages?

The CAN-SPAM Act establishes the requirements for commercial messages. It applies to all commercial messages, which the law defines as "any electronic mail message the primary purpose of which is the commercial advertisement or promotion of a commercial product or service". This includes email that promotes content on commercial websites. The law makes no exception for business-to-business emails. That means all emails, for example, a message to former customers announcing a new product line, must comply with the law.

Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $51,774, so non-compliance can be costly. However, following the law is straightforward. Here are the main requirements:

• Don't use false or misleading header information. Your "From," "To," "Reply-To," and routing information, including the originating domain name and email address, must be accurate and identify the person or business who initiated the message.
• Don't use deceptive subject lines. The subject line must accurately reflect the content of the message.
• Identify the message as an ad. The law gives you leeway in how to do this, but you must disclose clearly and conspicuously that your message is an advertisement.
• Tell recipients where you are located. Your message must include your valid physical postal address. This can be your current street address, a post office box you've registered with the US Postal Service, or a private mailbox you've registered with a commercial mail-receiving agency established under Postal Service regulations.
• Tell recipients how to opt out of receiving future marketing emails from you. Your message must include a clear and conspicuous explanation of how the recipient can opt out of getting marketing emails from you in the future. Craft the notice in a way that's easy for an ordinary person to recognize, read, and understand. Creative use of type size, colour, and location can improve clarity. Give a return email address or another easy internet-based way to allow people to communicate their choice to you. You may create a menu to allow a recipient to opt out of certain types of messages, but you must include the option to stop all marketing messages from you. Make sure your spam filter doesn't block these opt-out requests.
• Remember that subscribers and members can opt out of marketing emails, too. Recipients of emails from a sender that runs a subscription service or membership program still have the right to opt out of marketing messages from you. While you don't need to get members' consent to send them marketing emails, subscribers and members don't lose their ability to opt out of marketing emails from you simply because they have a subscription or membership. Before sending a message without an unsubscribe link to subscribers or members, be sure that the primary purpose of the message fits within one of the five categories of "transactional or relationship" message set out in the Act. If it doesn't, you need to include a way for recipients to opt out of further marketing messages from you.
• Honour opt-out requests promptly. Any opt-out mechanism you offer must be able to process opt-out requests for at least 30 days after you send your message. You must honour a recipient's opt-out request within 10 business days. You can't charge a fee, require the recipient to give you any personally identifying information beyond an email address, or make the recipient take any step other than sending a reply email or visiting a single page on an internet website as a condition for honouring an opt-out request. Once people have told you they don't want to receive more messages from you, you can't sell or transfer their email addresses, even in the form of a mailing list. The only exception is that you may transfer the addresses to a company you've hired to help you comply with the CAN-SPAM Act.
• Monitor what others are doing on your behalf. The law makes clear that even if you hire another company to handle your email marketing, you can't contract away your legal responsibility to comply with the law. Both the company whose product is promoted in the message and the company that actually sends the message may be held legally responsible.

In addition to the CAN-SPAM Act, there are other regulations that businesses should be aware of when sending commercial messages. For example, the Telephone Consumer Protection Act (TCPA) regulates telemarketing spam and requires businesses to obtain express written consent from consumers before sending them marketing text messages. Similarly, Canada's anti-spam law, the Canada Anti-Spam Legislation (CASL), requires businesses to obtain consent, provide identification information, and offer a way to unsubscribe from commercial electronic messages.

What are the penalties for violating spam laws?

The CAN-SPAM Act (Controlling the Assault of Non-Solicited Pornography And Marketing Act) is a US law enacted in 2003 that sets the standards for sending commercial emails. The law applies to all commercial messages, including business-to-business emails. It covers emails whose primary purpose is the commercial advertisement or promotion of a product or service.

The penalties for violating the CAN-SPAM Act can be severe and include both civil and criminal penalties. Each separate email in violation of the Act is subject to penalties of up to $51,744. Civil penalties are commonly addressed through fines or settlements, which can be costly for businesses. These penalties serve as a disciplinary measure to discourage non-compliance and protect consumers from deceptive or fraudulent email communications. For example, a small online retailer was fined $47,898 by the FTC for sending promotional emails without an opt-out function for subscribers.

Criminal penalties are imposed for more serious violations of the Act, such as fraudulent or malicious spam activities. Criminal charges can include damage compensation and imprisonment. For instance, the Act provides for imprisonment of up to five years for accessing someone else's computer to send spam without permission, using false information to register for multiple email accounts, or relaying spam messages through a computer to mislead others about the origin of the message.

In addition to federal penalties, state-level bodies or attorneys can also enforce penalties under the CAN-SPAM Act, providing further deterrence against unlawful email practices. State attorneys general can bring civil actions on behalf of their residents for violations of the Act and seek damages, injunctive relief, and attorney's fees.

Private individuals affected by fraudulent emails can also file private lawsuits to seek accountability and compensation from fraudulent spammers. These lawsuits can result in additional penalties and financial and legal consequences for violators.

Overall, the penalties for violating the CAN-SPAM Act can be significant, and non-compliance can lead to costly fines, legal repercussions, and damage to one's reputation. It is important for businesses to understand and adhere to the requirements of the Act to avoid these penalties and maintain ethical and transparent email practices.

How do I notify recipients that an email is an ad?

The CAN-SPAM Act, a US law that sets the rules for commercial email, requires senders to notify recipients that an email is an advertisement. This can be done by including specific wording in the body of the email, such as "advertisement" or "solicitation". However, specific wording is not required by law, and phrases like "This is a great offer for you" or "You might be very interested in this product" would also satisfy the law. Additionally, the law requires that the email includes a valid postal address, an honest subject line, unaltered header information, and an internet-based removal mechanism (opt-out).

It's important to note that the CAN-SPAM Act applies to all commercial email messages, including business-to-business emails. The primary purpose of the message is what determines whether it falls under the Act. If the message contains only commercial content, its primary purpose is commercial, and it must comply with the CAN-SPAM Act. This includes emails that promote content on commercial websites.

To avoid penalties, it is crucial to comply with the CAN-SPAM Act. Each separate email in violation of the law is subject to penalties of up to $51,744. The Federal Trade Commission (FTC) enforces the CAN-SPAM Act and monitors compliance.

In addition to the wording in the body of the email, there are other requirements to ensure compliance with the CAN-SPAM Act. The "From," "To," "Reply-To," and routing information must be accurate and identify the person or business sending the message. The subject line must accurately reflect the content of the message, and it is prohibited to use deceptive or misleading information.

It is also important to provide recipients with a clear and conspicuous explanation of how they can opt out of receiving future marketing emails. This notice should be easy for an ordinary person to recognize, read, and understand. Creative use of type size, colour, and location can improve clarity. A return email address or another easy internet-based way for recipients to communicate their choice should be provided. It is important to honour opt-out requests promptly and to ensure that the spam filter does not block these requests.

What are the rules for sending spam emails to wireless devices?

The CAN-SPAM Act was passed by Congress in 2003 to address the problem of unwanted commercial electronic mail messages. The Act requires the Federal Communications Commission (FCC) to issue rules regarding commercial email and some text messages sent to wireless devices such as cell phones.

The FCC has adopted rules prohibiting marketers from sending "mobile service commercial messages" (MSCMs) to wireless devices without first obtaining express prior authorization from the recipient. This includes messages sent to domain names designated by wireless carriers specifically for mobile services, such as 2025551212@carrier.com. Messages sent from a phone to a wireless phone or forwarded from a traditional email address to a wireless device are not included in this definition.

To obtain express prior authorization to send MSCMs, marketers must disclose the following:

• The subscriber is agreeing to receive commercial messages on their wireless device from a particular sender.
• The identity of the entity whose product is advertised, if different from the sender.
• The subscriber may be charged for receiving the messages.
• The subscriber may revoke consent at any time.

Additionally, MSCMs must comply with the disclosure requirements of the CAN-SPAM Act, including:

• Non-misleading subject headings and transmission information.
• An opt-out mechanism for recipients to request to stop receiving emails.
• The physical address of the sender.
• Clear identification that the message is an advertisement or solicitation.
• Certain labels for sexually-oriented materials.

Marketers must also provide one of the opt-out mechanisms through the same method by which consent was obtained. For example, if the recipient provided a short code mechanism to grant consent, the sender must provide a short code mechanism to opt out.

Violations of the FCC's rules for wireless spam can result in fines of up to $11,000 per violation. An individual MSCM may result in multiple violations if it is sent to an address listed in the wireless domain name registry, the recipient has not opted in, and the message fails to meet the requirements of the CAN-SPAM Act.

Frequently asked questions