Is CAN-SPAM Canned? The New Era of Email Marketing

The US’s anti-spam law, the Controlling the Assault of Non-Solicited Pornography And Marketing (CAN-SPAM) Act, was passed way back in 2003. That was well before much stronger anti-spam laws were passed in other countries, most notably CASL in Canada and GDPR in the EU, which have set email marketing standards for multinational American brands.

But, more importantly, CAN-SPAM was passed before mailbox providers upped their spam filtering game so much that they effectively eradicated traditional, malicious spam.

With spam almost entirely blocked before reaching even consumers’ spam folders, much less their inboxes, consumers were left with a Report spam button that they didn’t quite know what to do with. With no malicious messages they didn’t request from unknown senders to report as spam, consumers started using the Report spam button to complain about other messages. For instance, they used it to nix unwanted emails from brands they knew — and even to banish emails they gave brands permission to send to them.

Let’s take a look at the anti-spam law, CAN-SPAM.

Of course, that’s just one way in which mailbox providers have led the way on fighting spam and, indeed, establishing the rules of engagement for email marketers. Last month, for instance, in an unprecedented collaboration, Google and Yahoo released joint email standards on authentication, spam complaint rates, and more that go into effect in February 2024.

That announcement made one of my colleagues ask, “I wonder what the FTC thinks about this?” Of course, as private businesses, mailbox providers are allowed to set higher standards. But as I thought more about everything major mailbox providers have done, I asked a different question: Is CAN-SPAM now meaningless?

Let’s answer that question by exploring the core tenets of CAN-SPAM and what the major inbox providers require of senders.

Related Article: 7 Burning Questions About Email Unsubscribes

Anti-Spam Law: Permission Not Required

CAN-SPAM says senders can email whomever they want, so long as they give them a way to opt out (more on that in a moment). In contrast to opt-in marketing laws like CASL and GDPR, CAN-SPAM codifies opt-out marketing, which doesn’t require permission from recipients.

Mailbox providers say nay. While they don’t mandate permission per-se, they give their users the ability to report a sender’s emails as spam. When a recipient does that, your emails don’t reach their inbox anymore. And if enough of your recipients do that, then none of your emails reach any of the inboxes controlled by the provider.

Gmail specifies in its Email Sender Guidelines that senders should “aim to keep your spam rate below 0.10%.” Moreover, they say senders should “avoid a spam rate of 0.30% or higher, especially for any sustained period of time.” Yahoo says it will follow this same standard. This is the first time that mailbox providers have spelled out exactly the complaint thresholds they don’t want to see exceeded.

Related Article: The Gmail Promotions Tab: 10 Years of Email Marketing Misunderstandings

Provide an Easy Way to Unsubscribe

CAN-SPAM says senders must include unsubscribe links in all promotional emails — that is, all emails that aren’t transactional in nature. Moreover, it stipulates that unsubscribe processes should be simple and clear, and that senders can’t require additional information from people who want to opt out.

For example, that prohibits senders from requiring people to create or log into an account in order to unsubscribe. It also prohibits them from asking for the person’s name or even their email address, as all of that unnecessarily burdens consumers.

Mailbox providers say it should be even easier. In addition to providing the Report spam button (which is essentially a one-click unsubscribe with vengeance), Gmail and Yahoo are now mandating that bulk sender include list-unsubscribe headers in their promotional emails. These headers power one-click unsubscribe links that appear next to the sender name in inbox interfaces, as well as in Gmail when you click the Report spam link and it asks if you’d like to Unsubscribe and report spam or just Report spam.