According to the CAN-SPAM Act, you must provide a clear and easy-to-use method for recipients to opt out of your emails. Once a recipient requests to opt-out, you must honor the request within 10 business days. The GDPR also requires that opting out is simple and accessible, empowering users to control their own data.