The [General Data Protection Regulation (GDPR)](https://) is a law in the European Union that governs how personal data should be protected. The [CAN-SPAM Act](https://) is a U.S. law that sets rules for commercial emails, giving recipients the right to stop receiving emails. Both regulations require explicit consent from subscribers and mandates that businesses provide a way to opt-out easily.