Several key regulations govern data protection in email marketing. The General Data Protection Regulation (GDPR) in Europe mandates that businesses obtain explicit consent from individuals before sending marketing emails. In the United States, the CAN-SPAM Act sets rules for commercial emails, requiring transparency and honest subject lines. The California Consumer Privacy Act (CCPA) grants California residents enhanced privacy rights and control over their personal data.