Category
5 articles in Compliance.
Email marketing law isn't optional: CAN-SPAM in the US, GDPR in Europe, CASL in Canada, and sector rules like HIPAA all set requirements for consent, unsubscribes, and data handling — with real penalties behind them. These plain-English guides explain what each regulation requires and how to build compliant practices into your program from the start. They're practical overviews, not legal advice.
What the law actually requires from your unsubscribe link under CAN-SPAM, CASL, and GDPR, plus the one-click List-Unsubscribe headers major mailbox providers now require from bulk senders. Includes a comparison table of deadlines, the friction you cannot add, footer requirements, and preference-center best practice.
Email consent wording has to name who is sending, what they will send, how often, and how to stop. This guide gives seven copy-and-adapt checkbox examples by scenario, a table of failing wording with fixes, the design traps around the box itself, how GDPR, CAN-SPAM and CASL differ, and exactly what to record so consent can be proven later.
A practical GDPR checklist for email marketers: lawful basis, signup form rules, the consent records you must be able to produce, subscriber rights that actually work, DPAs with processors, retention limits, and a one-page audit you can run today.
How long to keep each type of subscriber data, from consent records and engagement history to suppression lists that should never be deleted. Includes a retention period table by data type, the delete vs anonymize vs suppress decision, and a six-step policy you can actually operate.
Your website privacy policy probably ignores your email program. Here is the full data inventory to disclose, how to handle legal basis and subprocessors, a retention schedule you can actually execute, and where the policy must be linked.
