What are key CAN-SPAM requirements?

• A. Only opt-in consent required.
• B. No restrictions on subject lines.
• C. Opt-out option, accurate header information, no deceptive subject lines, and physical address.
• D. Requires encryption of emails.

Answer: (C)

CAN-SPAM governs commercial emails in the United States by ensuring recipients aren’t misled and can easily opt out of future messages. The essential requirements are clear: provide a working opt-out mechanism and honor opt-out requests promptly; include header information that accurately identifies the sender and routing; avoid deceptive or misleading subject lines; and include a valid physical postal address in the email. Encryption is not a CAN-SPAM requirement, and opt-in consent is not required under this law, though it is under other regulations. An easy-to-use unsubscribe process and honoring requests within a reasonable timeframe (typically about 10 business days) are key parts of compliance. This combination is why the correct choice lists an opt-out option, accurate header information, no deceptive subject lines, and a physical address.