What are the penalties for non-compliance with anti-spam laws?
Anti-spam law penalties vary significantly by jurisdiction and can be substantial:
CAN-SPAM (United States):
Up to $46,517 per violation (adjusted for inflation)
Each separate email can be a separate violation
FTC and state attorneys general can bring enforcement actions
CASL (Canada):
Up to $1 million CAD per violation for individuals
Up to $10 million CAD per violation for organizations
Private right of action (individuals can sue)
Officers and directors can be personally liable
GDPR (European Union):
Up to 20 million euros or 4% of global annual revenue (whichever is higher)
Data protection authorities in each member state can enforce
Private lawsuits for damages also possible
UK PECR:
ICO can issue fines up to 500,000 pounds
Typically applied alongside GDPR enforcement
Beyond formal penalties: reputation damage, blocklisting, and loss of email deliverability create substantial business impact that doesn't appear in fines but affects operations.
Was this answer helpful?
Thanks for your feedback!