| 
         Number
        32: December 10, 2003 
 If you think your friends and colleagues would enjoy this newsletter
        feel free to forward it to them. If  someone
 sent this to you,  
 
 today. Outlook 2003 and AOL 9 users, please add us to your trusted or buddy lists, so you won't miss an issue. This week in Katydid:The
        CAN-SPAM Act of 2003Congress this week passed Senate
        Bill 877, the "Controlling the Assault of Non-Solicited
        Pornography and Marketing Act of 2003," known as the CAN-SPAM Act.
        At press time, the President has not signed it into law, but no one
        anticipates a veto. Since it goes into effect the first of the year, you
        might want to know if there's anything you have to do.
 Why Can Spam?Congress' findings are that e-mail is valuable but more than half of all
        e-mail is unsolicited commercial e-mail and much of that is rife with
        fraud, or is vulgar in nature. The volume of unwanted messages swamps
        out legitimate e-mail and you can't reliably refuse to accept e-mail
        from some senders.
 Technology has made the problem worse by allowing abusers to become
        more prolific, abusive, and elusive. The burden of the cost of e-mail is
        on the recipient, which creates incentives for abusers to continue. Many states are developing their own laws, which will create even
        more problems for enforcement. Therefore, the law creates a national
        standard that will regulate commercial e-mail, hold senders accountable
        for their messages and identity, and allow recipients to refuse e-mail
        they don't want. Commercial Electronic MailIf there are loopholes, the definition of commercial e-mail is a good
        place to find them. The law defines commercial e-mail as anything
        "the primary purpose of which is the commercial advertisement or
        promotion of a commercial product or service."
 I foresee the development of many spam varieties that do not
        primarily market a product, but that contain advertising. A newsletter such as the one you're reading now does not fall into
        this classification. One wonders how much advertising one could include
        in a newsletter before it became primarily commercial. The FTC has one
        year to come up with criteria. The law allows e-mails to include corporate branding elements without
        being considered commercial. Additionally, you can send 'transactional
        or relationship' messages - the normal confirmations of business
        exchange. It has always made sense to include cross-sell and up-sell
        promotions in these kinds of e-mails, but soon you will see advertising
        in every type of 'transactional' e-mail. How Far Will 'Relationship' Go?My reading is that the term 'relationship' in the act applies
        exclusively to a commercial relationship. I can send e-mail related to a
        purchase. I can provide safety and warranty notifications. I can update
        you with changes in features or policy. I can communicate information
        vital to an ongoing commercial relationship.
 However, I don't see a provision for relationships providing service
        after the sale. For example, a doctor could confirm payment for their
        services, but that relationship seems to end there by the act's
        definition. There is language that refers to communication regarding the
        ongoing use of a product or service and it is possible some marketers
        will try to stretch that meaning. As another example, you can send e-mail unsolicited to deliver a
        software upgrade, but you can't send an unsolicited e-mail letting the
        customer know that there is an upgrade available. However, if the
        software were licensed on a recurring basis, you could send upgrade
        advertisements (disguised as product notifications) until the expiration
        of the license. 'Affirmative Consent'Your recipient needs to take positive action in response to a 'clear and
        conspicuous' request to send them e-mail. This applies whether they sign
        up with you directly or through a third party. If you want to transfer
        the e-mail address to another party, you have to ask for explicit
        permission.
 We commonly call this the double opt-in. If there's a check box to
        receive e-mail, it can't be pre-selected, and it can't be buried in fine
        print. You can't slip tacit permission into a privacy policy and if you
        change your policy for dealing with e-mail, you still need to get
        explicit permission for commercial e-mail. Of course, you must prove that you have permission, and this could
        get sticky. You should archive all your printed requests for e-mail, and
        it wouldn't hurt to start getting signatures on manual forms that
        include permission for e-mail marketing. Web forms should log the IP
        address of the client's computer and time-stamp the request. To be on the safe side, I'd implement a process where you verify the
        recipient's request by sending an e-mail confirming permission. If they
        don't verify or reply, you should remove them from your marketing. This
        is similar to the process used by online newsgroups such as Yahoo. For large companies, you may want to implement policies for handing
        remove requests that don't come through normal channels. For example, a
        customer service agent may receive an angry e-mail asking you to stop
        sending e-mail. You'll want to develop a process to prevent those kinds
        of requests from slipping through the cracks. Use a centralized
        exclusion list to filter all bulk e-mail communications. Who Sent That?You're responsible for sending e-mail whether you do it yourself of pay
        someone to do it. Also, the liability extends to anyone who takes part
        in sending the e-mail. So, service providers can't say they were just
        doing what they were told. Further, the law applies to anyone outside
        the United States as long as the e-mail recipient is within the United
        States. There's no word yet, or whether other nations will honor
        extradition.
 The same liability looks to be true for co-branded e-mail. Each brand
        represented in the content would be considered liable for any violation
        of the act. Conversely, a line of business or a division of a larger
        company would not transfer liability to the parent company as long as
        the division did not include the branding of the parent company. The law forbids modifying the headers (spoofing) of e-mails, and
        anything that might mislead the recipient about the identity of the
        sender. If you couple this with the requirement for explicit permission
        to send unsolicited e-mail, it seems to forbid sending e-mail to your
        own list that primarily advertises for another company. For example, a
        bank could not send e-mail to their opt-in list on behalf of an
        insurance company. Crime and PunishmentThe law also forbids common tactics spammers employ to hide their
        identity or send mass transmissions. The matrix is complicated but the
        punishment for abuse ranges from one to five years in jail, a fine of up
        to $250 per e-mail (with a $2M cap), and forfeiture of any property used
        in the violation.
 Even though this law nullifies any state law that regulates spam, it
        allows states to file class action suits against violators.
        Additionally, it allows internet service providers (ISPs) to sue
        spammers that misuse their services for damages up to $1M. Do Not Spam RegistryThe Act gives the Senate Commerce Committee six months to come up with a
        plan to establish a registry similar to the telemarketing Do Not Call
        Registry. They're going to need all that time to figure out how it will
        work technically. This section gives nightmares to most service
        providers. Not only will you have to worry about your own exclusion
        list, buy you'll need to filter against a national list. Unless the list
        operates on the infrastructure level of the Internet (routers and
        servers), or is free to all participants, it may pose an onerous burden
        on small businesses. But don't fret; Congress has two years to study the
        impact the act will have on e-mail.
 No Jacket RequiredYour subject line does not have to include any kind of code, such as
        ADV, that labels the communication as commercial e-mail. Earlier
        versions of the bill required such a code. That requirement would have
        effectively killed commercial e-mail because everybody would filter out
        e-mail with that term. It would also have unfortunate side effects such
        as filtering any e-mail with words such as 'adventure,' advice', or
        'advance.'
 Wireless AccessAt some point, somebody said, "What about wireless?" Now that
        phones, blackberries, and other devices support simple message services,
        there is concern that SMS might soon stand for 'Send More Spam;' so, the
        act gives the FTC about nine months to come up with rules that will
        protect wireless users from unsolicited advertising.
 My PredictionsThis act heralds the birth of the age of the newsletter. It is the
        perfect vehicle for connecting with prospects with whom you do not have
        a transactional relationship. Advertising and sponsorships will become
        more commonplace as newsletters deliver captive audiences who share
        common interests and values.
 For a while, companies may find themselves frantic to obtain proof of
        permission with their own base. I recommend sending a one-time e-mail to
        your house list requesting explicit permission if you are at all in
        doubt. However, after cleaning house, companies will begin to market
        more confidently to their opt-in list, and will develop long tern
        strategies to limit churn. Once systems are in place, marketers will like having the ability to
        track the interest level of prospects. There will be more emphasis on
        testing content on small samples in order to maximize the impact of
        campaigns. There will be a highly publicized arrest within the next three
        months. Within the next year, there will also be an egregious case where
        the law seems to go beyond its intended reach. Possibly, it will be the
        same high-profile case. Finally, I'm going to go out on a limb and predict that despite the
        CAN-SPAM Act of 2003, spam will be with us for a long time to come. Top » Thanks for ReadingThis e-mail newsletter spreads mainly by word of
        mouth. Please send it on to your colleagues. Also, you can
        read other back issues.
 If you have suggestions of web sites to review, writing that buzzes,
        or a new way of looking at things, let me know. Send your suggestions to
        
. If you received this newsletter from a friend, please 
        today. Our subscriber lists are confidential; we never sell or rent our
        lists to third parties. If you want to 
from this newsletter,
        please let us know. Kind regards, Kevin Troy Darling
 Top » |