CAN-SPAM

The CAN-SPAM Act is a 2003 U.S. federal law that establishes requirements for commercial email messages and gives recipients the right to opt out of communications. For AI governance, CAN-SPAM becomes relevant when organizations deploy AI systems that generate, personalize, or send marketing emails at scale, as these systems must comply with opt-out mechanisms and accurate header information. Compliance with CAN-SPAM is essential for enterprises using generative AI for customer communications, as violations can result in significant fines and reputational damage.

1 item

Corporate PolicyUS2026-09-15

iLands AI Agents Violated Anti-Spam Law, Prompting FTC Complaints

Autonomous AI agents operated by startup iLands sent mass unsolicited messages to Mastodon administrators and writers, without legally required opt-out mechanisms under federal anti-spam law. Recipients filed FTC complaints after unsubscribe options were absent. The agents had also repeatedly attempted to create accounts on platforms that had blocked them, a sign of unsupervised scope escalation.

iLands autonomous agents FTC enforcement spam compliance agentic AI CAN-SPAM AI personas