CAN-SPAM Commercial Email Self-Assessment
A self-assessment based on Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN-SPAM federal source-bundle review — 2026-10-29), last reviewed 2026-10-29.
10 questions in 2 sections
What this checklist covers
Practical Yes/No/Not applicable questions based on the federal CAN-SPAM Act, FTC Rule, and FCC wireless-message requirements. This is an internal self-assessment aid, not a legal determination or certification.
Who it may be relevant to: For organisations sending US commercial email, their service providers and, where applicable, mobile-service commercial-email senders and wireless carriers.
How the self-assessment works
- Answer each question Yes, No or Not applicable. A No is a valid answer: it simply shows where you may want to look more closely.
- Add notes where they help, then review your answers before you finish. Attaching evidence is part of the assessment in a signed-in workspace, not of this public checklist.
- See a summary of what you answered. Your answers describe your own practices; they are not a legal finding.
Reviewing regularly helps you notice when your practices, systems or the policy itself change.
Start the self-assessmentSection 1 of 2
Sender identity and email content
Commercial-message headers, subject lines, disclosure and address.
- 1.
Are the From, Reply-To, originating domain, and routing details in your outgoing commercial and transactional emails truthful?
For commercial AND transactional/relationship emails, do not initiate a message with materially false or misleading headers, including origin, From, routing, or concealed unauthorized relay information.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(1)
- 2.
Do your commercial email subject lines accurately describe the material content of the message?
Commercial-email initiators must not knowingly or constructively use a subject line likely to mislead a reasonable recipient about a material fact regarding the message content or subject.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(2)
- 3.
Do covered commercial emails clearly identify themselves as advertising unless the prior-consent exception applies?
Covered commercial emails must clearly and conspicuously identify the message as an advertisement or solicitation unless the recipient has provided prior affirmative consent.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
- 4.
Do covered commercial emails clearly explain recipients’ opportunity to stop future marketing?
Covered commercial email must clearly and conspicuously notify recipients of the opportunity to decline future commercial messages from the sender.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(5)(A)(ii)
- 5.
Does every covered commercial email include a valid physical postal address for its sender?
Covered commercial email must identify the sender’s valid physical postal address; the FTC Rule defines this to include an accurately registered USPS PO box or eligible private mailbox.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(5)(A)(iii)
Section 2 of 2
Unsubscribe and suppression
Recipient choice, working mechanisms and post-request controls.
- 1.
Does each covered marketing email offer a clearly displayed, working unsubscribe route?
Every covered commercial email must include a functioning return address or Internet-based mechanism through which the recipient can ask to stop future commercial email from that sender at that address.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(3)(A)(i)
- 2.
Do your unsubscribe channels remain functional for at least 30 days after each covered marketing email?
A covered commercial email opt-out address or Internet mechanism must remain capable of receiving opt-out requests for no less than 30 days after the original message is transmitted; this is a minimum availability period, not a recurring due date.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(3)(A)(ii)
- 3.
If you offer email preference categories, can recipients still opt out of all marketing from that sender?
If a sender uses a list or menu for selective commercial-email preferences, it must include a choice to stop all commercial emails from that sender.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(3)(B)
- 4.
Do you suppress commercial emails covered by an opt-out within 10 business days of receipt?
After a recipient requests not to receive covered categories of commercial email, the sender must not initiate messages within the scope of the request more than 10 business days after receipt. Subsequent affirmative consent may remove the prohibition.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(4)(A)(i)
- 5.
Do your marketing agencies stop sending covered emails within the applicable 10-business-day opt-out period?
A person acting on behalf of the sender must not initiate an email covered by a known opt-out more than 10 business days after the sender received the request, subject to the statute’s knowledge conditions.
Evidence worth keeping: Optional: review relevant message samples, consent/suppression records, campaign controls or provider procedures; no evidence upload is required by this checklist.
Source: 15 U.S.C. § 7704(a)(4)(A)(ii)
This checklist is a self-assessment tool provided for information. It is not legal advice, and completing it does not certify, verify or guarantee compliance with any law or regulation. Review dates you set are your own and are not legal deadlines.