CAN-SPAM sounds like it should be complicated because it's a federal law with an acronym for a name. It isn't complicated. It's four rules that any small business sending a newsletter can follow without a lawyer, and most of the fear around it comes from not knowing what it actually says.
We're not lawyers and this isn't legal advice — for anything specific to your business, talk to one. But here's the plain-English version of what the FTC's own compliance guide actually requires, because most small-business owners have never read it and are following rumors instead.
Rule 1: don't lie in the subject line or the "from" name
If the email is from your hotel, the "from" field has to say your hotel, not something vague or misleading designed to get it opened. The subject line has to describe what's actually inside. "Your invoice is ready" as a subject line for a marketing email is exactly the kind of thing this rule exists to stop.
Rule 2: tell people it's an ad, if it is one
If your entire email is a sales pitch, it needs to be reasonably clear that it's advertising. This one trips people up less than they expect — a weekly newsletter that's mostly local news and content, with one offer inside it, generally reads as a newsletter rather than a pure ad, and doesn't need a giant "ADVERTISEMENT" banner. A standalone blast that's nothing but a coupon is closer to the line.
Rule 3: include your real physical address
Every commercial email needs a valid postal address — your actual street address, a registered PO box, or a commercial mail-receiving agency address. This one surprises people because it feels like an odd requirement for an email, but it's non-negotiable and it's usually just a line in the footer.
Rule 4: honor opt-outs, and make them easy
Every email needs a clear way to unsubscribe, it has to keep working for at least 30 days after you send, and you have to honor a request within 10 business days. You can't charge a fee, ask for any personal information beyond an email address, or make someone do more than reply to an email or visit a single page. A one-click link is the simplest way to clear that bar.
The FTC's guide lists seven requirements in all. The other three are honest header information, not hiding who the sender is, and staying responsible for anyone you hire to send email for you. These four are the ones that come up in every newsletter.
There's no rule requiring double opt-in (though it's good practice), no rule limiting how often you can send, and no rule against including an offer. The law is about honesty and easy exit, not about frequency or content.
The part people get wrong
The most common mistake isn't ignoring CAN-SPAM — it's assuming double opt-in or a fancy compliance tool is legally required when it isn't. The second most common mistake is not honoring unsubscribes fast enough because nobody on staff is actually checking that inbox. That second one is the one that actually gets businesses in trouble, because it's the one people report.
Where deliverability rules go further than the law
Google and Yahoo's current bulk sender requirements are stricter than CAN-SPAM itself, and they're the ones that will actually get you filtered to spam before the FTC ever gets involved. If you send 5,000 or more messages a day from one domain, Google requires one-click unsubscribe support (the technical kind, not just a link) and a spam complaint rate under 0.3% — details are in their bulk sender guidelines. Most small businesses are nowhere near that volume, but the underlying habits — real unsubscribe links, honest subject lines, content people actually want — are worth building regardless of your list size, because they're also just what keeps a newsletter alive.
A simple checklist
Real "from" name and honest subject line. A footer with your actual address. A one-click unsubscribe that works immediately, not eventually. And someone who checks that the opt-out list is actually being honored, not just technically present. That's the whole standard for a small-business newsletter — it fits on an index card, not a legal pad.
Frequently asked questions
Do I need a lawyer to send a newsletter? For a standard local-business newsletter following the four rules above, most businesses don't. If you're unsure about your specific situation, a quick consult is worth the cost of avoiding a mistake.
Does CAN-SPAM limit how often I can email? No — there's no frequency limit in the law. Deliverability (getting into the inbox at all) is a separate, practical concern from legal compliance.
What's the penalty for violating CAN-SPAM? Violations can carry real fines per email, which is exactly why the unsubscribe and address requirements aren't optional extras — they're the cheapest insurance you'll ever buy.