Does adding a physical address guarantee compliance?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
Having a physical address in your footer is a good start. But it's just one piece of a longer checklist, and checking it off doesn't mean the rest is covered.
CAN-SPAM is a US law that applies to commercial email. It sets out several requirements that all have to be met together. Missing even one can expose you to penalties, and the FTC has made it clear that partial compliance doesn't count.
Here's what CAN-SPAM actually requires from every commercial email you send:
- Accurate sender information. Your "From", "Reply-To", and routing information can't be deceptive. The name and domain have to identify who's really sending the email.
- Honest subject lines. Your subject line can't mislead the recipient about the content of the email. Clickbait that has nothing to do with what's inside is a violation.
- Clear commercial identification. If the message is an advertisement or promotional, that has to be clear. There are exceptions if you have a prior relationship, but the intent still needs to be transparent.
- A valid physical postal address. This is the one you've checked. It can be a street address, a registered P.O. Box, or a private mailbox registered with a commercial mail receiving agency.
- A clear and visible unsubscribe mechanism. Every email needs a way for people to opt out. That mechanism has to work, and it has to be easy to find. Hidden or buried unsubscribe links don't count.
- Honoring unsubscribe requests within 10 business days. Once someone opts out, you have to stop emailing them within that window. You can't charge them, require extra information beyond an email address, or make them jump through hoops.
One thing worth knowing: CAN-SPAM is a US law, and it only covers commercial email sent to US recipients. If you're also emailing people in Canada or the EU, different rules apply. Canada has its own consent requirements under CASL, and GDPR works very differently from CAN-SPAM. Jurisdiction matters a lot here.
So no, the physical address alone doesn't make you compliant. But running through this checklist before your next send will get you a lot closer. If you're not sure where your setup stands, our SOS hotline is free and we're happy to take a look with you.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.