Legal Frameworks & Global Laws
The "maritime laws" of the digital sea. This section provides an overview of the major global regulations, including GDPR (Europe), CASL (Canada), and CAN-SPAM (USA), and explains the core concepts of "opt-in" vs. "opt-out.
Questions about Legal Frameworks & Global Laws
What is GDPR?
Who does GDPR apply to?
What are the key requirements of GDPR for email marketing?
What constitutes valid consent under GDPR?
Does GDPR require double opt-in?
What are the penalties for GDPR violations?
What rights do individuals have under GDPR (e.g., access, deletion)?
What is the CAN-SPAM Act?
What are the main requirements of CAN-SPAM?
Does CAN-SPAM apply to transactional emails?
What information must be included in commercial emails under CAN-SPAM?
How quickly must unsubscribe requests be honored under CAN-SPAM?
What are the penalties for CAN-SPAM violations?
What is CASL?
Who does CASL apply to?
What type of consent is required under CASL (implied vs. express)?
How long does implied consent last under CASL?
What information must be included in emails under CASL?
What are the penalties for CASL violations?
What is LGPD?
Who does LGPD apply to?
What are the key requirements of LGPD for email marketing?
How does LGPD define consent?
What rights do individuals have under LGPD?
What is the CCPA (California Consumer Privacy Act)?
How does CCPA affect email marketing?
What are the key email privacy laws in the APAC region?
Do I need to comply with laws in every country I email?
How can I manage compliance across different regions?
What are the main international email laws (GDPR, CAN-SPAM, CASL, LGPD, PECR)?
How do GDPR and CAN-SPAM differ in enforcement?
What does CASL require that CAN-SPAM doesn’t?
What is the scope of LGPD (Brazil)?
How does Australia’s Spam Act compare?
What are Asia-Pacific frameworks (Singapore, Japan, India)?
What are the key requirements under each?
What are the penalties for non-compliance?
What are common misconceptions about CAN-SPAM?
What is “commercial electronic message” (CEM) under CASL?
What counts as “processing personal data” under GDPR?
How does GDPR define a “data controller” and “data processor”?
What is a DPA (Data Processing Agreement)?
What are cross-border data-transfer requirements?
What is the role of the EU-US Data Privacy Framework?
How do U.S. state-level privacy laws (CCPA, CPA, VCDPA) affect email?