Beacon Insurance Brokerage implements an automated email sequence to cross-sell life insurance policies to its existing property and casualty policyholders. The emails feature a clear, non-deceptive subject line, include the brokerage's physical postal address, and provide an 'unsubscribe' link. When a policyholder clicks the unsubscribe link, they are redirected to a webpage that requires them to log into their customer account with a password to update their email preferences. The brokerage successfully processes all opt-out requests within 5 business days.
Based on the CAN-SPAM Act, which aspect of this email campaign constitutes a compliance violation?
- Requiring recipients to log into a customer account to update their email preferences.Answer
- BSending commercial marketing emails to existing policyholders without first obtaining express written consent.
- CProcessing and honoring the opt-out requests within 5 business days instead of immediately.
- DClassifying the cross-sell emails as commercial messages rather than exempt transactional relationship messages.
Answer
Requiring recipients to log into a customer account to update their email preferences.
The CAN-SPAM Act mandates that an opt-out mechanism must not require a recipient to pay a fee, provide any information other than an email address, or take any steps other than sending a reply email or visiting a single page on an Internet website. Requiring a user to log into an account or remember a password creates a prohibited barrier to opting out.
Step-by-Step Solution
Key Concept
CAN-SPAM Act Opt-Out Mechanics and Prohibitions