Category: Compliance & Legal

  • The footer that’s quietly turning into a legal liability

    The footer that’s quietly turning into a legal liability

    You copied your newsletter footer from a template three years ago and haven’t looked at it since. It’s got an unsubscribe link, a physical address (possibly your old flat), and some vague language about why people are receiving this email. Job done, right?

    Not quite. Your footer isn’t just boilerplate—it’s a legal document that sits at the bottom of every send. And if you’re operating in multiple jurisdictions, sending commercial content, or simply grown beyond a hobby list, there’s a decent chance yours is putting you at risk.

    What the law actually requires (and it’s not universal)

    There’s no single set of footer rules. GDPR, CAN-SPAM, CASL, PECR—each has different requirements, and which ones apply depends on where your subscribers are, not where you are.

    Under CAN-SPAM (US), you need a valid physical postal address, a clear identification that the message is an advertisement (if it is), and a functioning unsubscribe mechanism that processes requests within 10 business days. Under GDPR (EU/UK), you need to explain the lawful basis for processing, provide clear identity information, and honour withdrawal of consent immediately. CASL (Canada) requires clear identification of the sender and a working unsubscribe that’s free and simple.

    Most operators assume one disclaimer covers everything. It doesn’t. If you’re sending to a mixed list—say, subscribers in London, Toronto, and Texas—you need to meet the strictest requirements that apply to anyone on that list.

    The bits that get you in trouble

    The postal address requirement trips up a lot of people. CAN-SPAM requires it. If you’re a solo operator working from home, you might not want to publish your home address at the bottom of every email. You’ve got options: a registered agent service, a PO box, or private mailbox rental. But “123 Main Street” or a obviously fake address isn’t compliant, and regulators do check.

    Then there’s the unsubscribe mechanism itself. It needs to work. It needs to be easy to find. It can’t require a login. It can’t ask people to confirm their choice across multiple pages. Some platforms default to a two-step process (click, then confirm on a landing page)—that’s fine. But if you’re adding friction beyond that, or burying the link in grey text on a grey background, you’re begging for complaints.

    Another common mistake: using the footer to explain why someone is on your list, but getting the reason wrong. If someone signed up for a lead magnet two years ago and you’ve been sending them product updates ever since, your footer shouldn’t say “You’re receiving this because you subscribed to our weekly newsletter.” It should reflect reality—or you should fix your segmentation so it does.

    What good looks like

    A solid footer is clear, accurate, and doesn’t try to hide anything. It identifies who’s sending (company name, not just a brand), provides a real contact method (not just a no-reply address), includes a valid postal address, and explains the legal basis for sending in plain language.

    If you’re sending different types of content—editorial, transactional, promotional—your footer should reflect that. A receipt doesn’t need the same unsubscribe flow as a marketing campaign. But if you’re mixing content types in a single send, the most restrictive rules apply.

    It’s also worth reviewing your footer every time your business changes. New entity structure? Update the name and address. Moved to a new platform? Check the unsubscribe flow still works. Expanded into a new market? Make sure you’re compliant with local rules.

    Stop thinking of it as a formality

    The footer is where trust goes to die—or gets reinforced. It’s the last thing people see, and often the first thing they look for when something feels off. A sloppy footer signals a sloppy operation. A clear, honest one does the opposite.

    Take ten minutes this week and actually read your footer. Click the unsubscribe link. Check the address is current. Make sure the language matches what you’re actually doing. If you’re not sure whether you’re compliant, you probably aren’t.

    If this resonated, you’ll want the next one. Reply to this email and let us know what footer questions you’re still sitting on—or subscribe to One Two Three Send if someone forwarded this your way.