What are the penalties for non-compliance with anti-spam laws?
Anti-spam law penalties vary significantly by jurisdiction and can be substantial:
CAN-SPAM (United States):
- Up to $46,517 per violation (adjusted for inflation)
- Each separate email can be a separate violation
- FTC and state attorneys general can bring enforcement actions
CASL (Canada):
- Up to $1 million CAD per violation for individuals
- Up to $10 million CAD per violation for organizations
- Private right of action (individuals can sue)
- Officers and directors can be personally liable
GDPR (European Union):
- Up to 20 million euros or 4% of global annual revenue (whichever is higher)
- Data protection authorities in each member state can enforce
- Private lawsuits for damages also possible
UK PECR:
- ICO can issue fines up to 500,000 pounds
- Typically applied alongside GDPR enforcement
Beyond formal penalties: reputation damage, blocklisting, and loss of email deliverability create substantial business impact that doesn't appear in fines but affects operations.
Need personalized help?
Understand the real financial penalties you face. Open an AI assistant with your question pre-loaded — just add your details and send.
Was this answer helpful?
Thanks for your feedback!