Three laws. Three very different rulebooks."Am I even allowed to keep emailing this list?" It's the right question, and the honest answer is: it depends on where your subscriber lives, not where you sit. Three big laws set the rules, and they disagree with each other. Let's sort them out.
⬡ split-compare, three columns fading in: US · Europe · Canada, each with a flag pin over a mailboxStart with the US. CAN-SPAM is an opt-out law. It's pretty relaxed about how you built the list, it mostly cares that you honor an unsubscribe within ten business days and that you clearly say who you are. It does not require you to get permission first.
⬡ record-cards, card "CAN-SPAM (US)": pills "Honor opt-out in 10 business days" · "Identify yourself" · "No prior consent required"Europe: prove you have permission.Europe is stricter. Under GDPR you need clear consent to send, and you have to be able to prove you have it. You also can't hoard data forever. When someone withdraws, you act on it, and stale records can't just sit there gathering dust.
⬡ record-cards, card "GDPR (EU/UK)": pills "Explicit consent" · "Prove it" · "Honor withdrawal" · "Don't keep forever"Canada's CASL is the toughest of the three. It wants express or implied opt-in before you send anything commercial, and it wants you to keep the records that show you had that permission. If you send across borders, you're likely juggling all three at once.
⬡ split-compare, needle sliding across a "how strict" bar: CAN-SPAM (loose) to GDPR (strict) to CASL (strictest)If this is starting to click, subscribe. We're walking through the whole compliance-and-hygiene playbook, one plain answer at a time.
⬡ title-card, "Subscribe: the deliverability playbook"So where does hygiene fit? Across all three, the same three habits keep you clean. Keep your data accurate, so remove hard bounces as they happen. Honor unsubscribes, every time. And respect the regional rules for the people you're actually mailing. It's not a one-time audit. It's a habit you keep.
⬡ checklist, three ordered checks: 1 Remove hard bounces · 2 Honor unsubscribes · 3 Match regional rulesThe one line to remember: US cares that you let people leave, Europe and Canada care that you had permission to arrive. Hygiene is how you prove you're doing both. Rules shift and vary by region, so for your exact situation, check your obligations or talk to counsel.
⬡ title-cardKeep the list accurate, keep the opt-outs, keep the proof.
Next up: how GDPR specifically treats the dead and stale addresses hiding in your list. And subscribe, we answer every email question, one at a time.
⬡ end-card, Subscribe + Next: "How GDPR treats invalid or stale data" (005.012.002)What are the legal responsibilities for email list hygiene? Three frameworks set the rules and they don't agree. CAN-SPAM in the US is opt-out: honor unsubscribes within ten business days, identify yourself, no prior consent needed. GDPR in Europe wants demonstrable consent and forbids keeping data forever. CASL in Canada is strictest: express or implied opt-in before any commercial message, with records to prove it. Across all three, hygiene is the same habit: remove hard bounces, honor opt-outs, match the rules for where your subscribers actually live.
This is general guidance on what regulators expect, not legal advice. Rules differ by region and change, so check your obligations for your specific situation.
0:00 Three laws, three rulebooks
0:20 CAN-SPAM (US)
0:50 GDPR (Europe)
1:20 CASL (Canada)
2:00 What hygiene actually means here
2:40 Takeaway
Next: How GDPR treats invalid or stale data → [link 005.012.002]
Full written guide → reviewmyemails.com/emailalmanac/compliance/list-hygiene-and-data-practices/what-are-the-legal-responsibilities-for-list-hygiene
If your list is a mix of ages and sources and you're not sure what shape it's in, our SOS hotline is free (and we actually pick up).
#email #compliance #deliverability