compliance

Guide email campaigns through CAN-SPAM, GDPR, and CASL compliance requirements.

16|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/autosendhq/email-skills --skill compliance-autosendhq
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: compliance
Source: https://github.com/autosendhq/email-skills/tree/main/compliance
Command: npx skills add https://github.com/autosendhq/email-skills --skill compliance-autosendhq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Compliance for email sending is non-negotiable; if you ignore CAN-SPAM, GDPR, or CASL you risk fines, deliverability issues, and reputational damage. This skill provides a comprehensive overview of legal requirements, consent flows, and user rights to help ensure every campaign aligns with regional regulations.

Core Features & Use Cases

  • Covers CAN-SPAM (US), GDPR (EU/EEA), and CASL (Canada) with practical guidelines for routing, consent, unsubscribe, and data handling.
  • Provides templates and checklists for consent capture, opt-out flows, and footer disclosures to support marketing campaigns, transactional emails, and list hygiene.
  • Use cases include designing consent flows for onboarding, handling deletion requests under GDPR, and maintaining suppression and unsubscribe records to protect deliverability.

Quick Start

Implement consent capture, unsubscribe handling, and data retention controls for email campaigns.

Frequently Asked Questions about compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I ensure my email campaigns comply with GDPR, CAN-SPAM, and CASL regulations?

To ensure email compliance across GDPR, CAN-SPAM, and CASL, you must implement jurisdiction-specific consent capture, enforce opt-out mechanisms, maintain suppression records, and apply required footer disclosures for US, EU/EEA, and Canada campaigns.

What's the best way to handle GDPR data deletion and access requests for email lists?

Handling GDPR data deletion and access requests requires enforcing data retention controls and maintaining documented consent records within your email list management process to verify user rights and execute suppression.

Do I need explicit consent before sending marketing emails under CASL and GDPR?

Yes, CASL and GDPR require explicit consent before sending marketing emails, meaning you must capture documented consent during onboarding and store verifiable records to prove compliance during audits.

How do I set up unsubscribe and opt-out mechanisms that meet CAN-SPAM requirements?

Setting up CAN-SPAM compliant unsubscribe mechanisms involves routing opt-out requests through an automated suppression system, processing them promptly, and including required footer disclosures in every commercial email.

What email footer disclosures are required for cross-border campaigns targeting the US, EU, and Canada?

Cross-border email campaigns require jurisdiction-specific footer disclosures, including valid physical postal addresses for CAN-SPAM, clear consent identifiers for CASL, and data handling notices for GDPR compliance.

Why does poor email consent management impact deliverability and cause legal risks?

Poor email consent management impacts deliverability and causes legal risks because ignoring CAN-SPAM, GDPR, or CASL unsubscribe and data retention rules triggers spam filters, suppresses sending domains, and incurs regulatory fines.