An unsubscribe mechanism must be easy to find and simple to use. Under the CAN-SPAM Act, the process should not require the recipient to log in or provide any additional information beyond their email address. GDPR and CASL also require an easy opt-out process, typically in the form of a link in the email.