Página traducida y verificada automáticamente. Prevalece la versión en inglés. Algunas partes siguen en inglés mientras se verifica su traducción. Ver en inglés · Informar un error de traducción
CAN-SPAM
Ley CAN-SPAM
Encabezados y asuntos veraces, una dirección postal y una exclusión voluntaria respetada en un plazo de diez días hábiles. No se requiere consentimiento para enviar.
The law in brief
CAN-SPAM is the US federal law for commercial email. It does not require consent before sending, which surprises people used to European rules. Instead it requires honesty and an easy way out: truthful headers and subject lines, identification as an advertisement, a valid postal address, and an opt-out that works and is honored quickly.
It largely preempts state laws on commercial email, except those aimed at falsity or deception. Other laws still apply alongside it, including the TCPA for text messages, and foreign laws such as Canada's CASL and the EU's ePrivacy rules when you email people there.
A quién se aplica
- Anyone who sends or initiates commercial email, meaning email whose primary purpose is advertising or promoting a commercial product or service, including business-to-business email.
- The company whose product is promoted is responsible even when a vendor or affiliate sends the email.
- Transactional or relationship messages, such as receipts, account notices and warranty information, are exempt from most requirements but may not contain false or misleading routing information.
What it requires
No false or misleading headers or subject lines
From, To, Reply-To and routing information must be accurate and identify the sender, and the subject line must not mislead about the content.
Identify it as an advertisement
Disclose clearly and conspicuously that the message is an advertisement or solicitation, unless the recipient gave affirmative consent.
A valid postal address
Include your valid physical postal address in every commercial email.
A working opt-out, honored within 10 business days
Provide a clear opt-out mechanism that works for at least 30 days after sending, and stop sending within 10 business days of a request. Do not charge a fee or ask for more than an email address and opt-out preferences.
No selling opted-out addresses
Do not sell or transfer the email address of someone who has opted out, except to a company helping you comply.
Derechos de las personas
Recipients have the right to opt out of further commercial email from a sender, by a method that costs them nothing beyond sending a reply or visiting one web page, and to have that request honored.
Enforcement and penalties
Cada correo electrónico que infrinja la ley puede acarrear una sanción civil de decenas de miles de dólares, ajustada cada año a la inflación, que aplica la FTC. Los fiscales generales de los estados y los proveedores de acceso a internet también pueden demandar. Algunas prácticas, como falsificar encabezados o recolectar direcciones, pueden ser delito.
What to do first
- Classify your messages: commercial, transactional or relationship, and apply the rules to anything commercial.
- Check headers and subject lines for anything misleading.
- Add a valid physical postal address to every commercial email.
- Make opt-out work: one click or one reply, honored within 10 business days, and kept working for at least 30 days after sending.
- Monitor vendors and affiliates sending on your behalf.
- Check foreign rules for recipients outside the US, which may require consent.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
Novedades recientes
Aún no hay nada que informar. Regulatory Watch enumera las nuevas normas, medidas de cumplimiento y decisiones judiciales a medida que llegan.
Fuentes
- 16 CFR Parte 316, Regla CAN-SPAM eCFR · Texto oficial o regulador
Biblioteca de regulaciones
Todas las leyes estatales de privacidad de EE. UU., en un mapa
24 estados tienen una ley integral de privacidad en la biblioteca, junto con las leyes de la UE, del Reino Unido, federales de EE. UU. y globales: 102 en total, cada una explicada en palabras sencillas con sus fuentes. Seleccione un estado para ver qué se aplica allí.
- En vigor
- Entrada en vigor
- Leyes sectoriales