Compliance Desk · Opt-Out Desk · answer

CAN-SPAM opt-outs: the 10-business-day rule and what a compliant mechanism looks like

Every commercial email must include a clear way to opt out that works for at least 30 days after sending; you must honor the request within 10 business days, may not charge or require more than an email address and a reply, and may not sell or transfer the address afterwards except to a processor.

The FTC can seek civil penalties per non-compliant email, and CAN-SPAM also requires accurate headers, a physical postal address and honest subject lines.

An opt-out desk records the request and the honor date so the 10-day rule is provable.

Primary source: https://www.fcc.gov/general/telemarketing-and-robocalls. Informational, not legal advice.

Related answers

• Does the TAKE IT DOWN Act apply to my website, app or community?
• TAKE IT DOWN Act notice and removal request form: what must they include?
• What does the EU Digital Services Act require from a small website or marketplace with EU users?
• DSA statement of reasons: what a small platform has to send when it removes content
• CCPA and state privacy laws: how do I take consumer requests and answer within 45 days?
• GDPR access requests: what a small company must do within one month

Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · llms.txt