Which of the following are two key CAN-SPAM requirements?

• A. Opt-in before sending any marketing emails.
• B. The use of deceptive subject lines is allowed.
• C. Enforcing a strict 140-character limit for emails.
• D. Truthful header information and an unsubscribe option.

Answer: (D)

CAN-SPAM is about ensuring commercial emails are not deceptive and that recipients have an easy way to opt out. The two key requirements reflected here are truthful header information and an unsubscribe option. Truthful header information means the header fields (From, To, Subject, Reply-To) must clearly identify who sent the message and what it’s about, so recipients aren’t misled about the sender or the content. An unsubscribe option gives recipients a simple path to stop receiving messages, and compliant senders must honor those requests promptly (typically within 10 business days).

Opting in before sending isn’t required by CAN-SPAM—it’s an opt-out framework, and while consent is important in many contexts, CAN-SPAM allows sending to recipients who have not opted in. Deceptive subject lines are not allowed under CAN-SPAM, and there’s no 140-character limit for emails.