Skip to main content

What are the penalties for non-compliance with anti-spam laws?

Anti-spam law penalties vary significantly by jurisdiction and can be substantial:

CAN-SPAM (United States):

Up to $46,517 per violation (adjusted for inflation)

Each separate email can be a separate violation

FTC and state attorneys general can bring enforcement actions

CASL (Canada):

Up to $1 million CAD per violation for individuals

Up to $10 million CAD per violation for organizations

Private right of action (individuals can sue)

Officers and directors can be personally liable

GDPR (European Union):

Up to 20 million euros or 4% of global annual revenue (whichever is higher)

Data protection authorities in each member state can enforce

Private lawsuits for damages also possible

UK PECR:

ICO can issue fines up to 500,000 pounds

Typically applied alongside GDPR enforcement

Beyond formal penalties: reputation damage, blocklisting, and loss of email deliverability create substantial business impact that doesn't appear in fines but affects operations.