Summit Insurance Group contracts with an external marketing vendor to distribute commercial emails promoting their newly launched annuity products. On a Tuesday, a prospective client clicks the "unsubscribe" link within one of these promotional emails. The following day, Summit Insurance Group abruptly terminates its contract with the marketing vendor.
Under the CAN-SPAM Act, which of the following statements accurately describes Summit Insurance Group's regulatory obligation regarding this opt-out request?
- Summit Insurance Group remains legally responsible for ensuring the opt-out request is honored within 10 business days, as both the advertiser and the sender share compliance liability.Answer
- BSummit Insurance Group has 31 days to process the email opt-out request, aligning the requirement with the timeframes established by the National Do Not Call Registry.
- CSummit Insurance Group is relieved of the obligation because they successfully transferred the compliance risk to the vendor prior to the termination.
- DSummit Insurance Group must report the unprocessed opt-out request to the State Department of Insurance within 30 days of terminating the vendor.
Answer
Summit Insurance Group remains legally responsible for ensuring the opt-out request is honored within 10 business days, as both the advertiser and the sender share compliance liability.
Under the CAN-SPAM Act, the company whose product or service is being advertised cannot contract away its legal liability. Even though a third-party vendor originally sent the email, Summit Insurance Group remains legally responsible for ensuring the opt-out request is honored within the statutory deadline of 10 business days.
Step-by-Step Solution
Key Concept
CAN-SPAM Act Liability and Opt-Out Timeframes