Back

Refrain from sending commercial electronic messages, physical mail, or making telephone calls after an opt out by a user.


CONTROL ID
00288
CONTROL TYPE
Behavior
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an anti-spam policy., CC ID: 00283

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • (Art 50(1), Korea Act on Promotion of Information & Communication Network Utilization and Information Protection, etc.)
  • If a subscriber or user of a Singapore telephone number gives notice withdrawing consent given to a person for the sending of any specified message to that Singapore telephone number, the person shall cease (and cause its agent to cease) sending any specified message to that Singapore telephone numb… (PART IX Division 3 Section 47 (3), Singapore Personal Data Protection Act 2012 (No. 26 of 2012))
  • If a subscriber or user of a Singapore telephone number gives notice withdrawing consent given to a person for the sending of any specified message to that Singapore telephone number, the person shall cease (and cause its agent to cease) sending any specified message to that Singapore telephone numb… (§ 47.(3), Singapore Personal Data Protection Act 2012 (No. 26 of 2012), Revised Edition 2021)
  • (§ 15, Australia Spam Act)
  • If an organization obtains electronic contact information (e-mail address) from customers upon the sale of a product or service, that organization may use the e-mail address for direct marketing of its own similar services or products, if the customer is clearly and distinctly given the opportunity … (Art 13.2, Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector)
  • If the data subject files an objection, the data controller must terminate, without delay, the use of personal data, collected in section 7(4)(d), in the mail correspondence. (§ 13(5), Slovak Republic Protection of Personal Data in Information Systems)
  • The person who sent the commercial electronic message and the person if different on whose behalf the message was sent must ensure that effect is given to an indication sent in accordance with paragraph (1)(b) without delay, and in any event no later than 10 business days after the indication has be… (Section 11(3), An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian Radio-television and Telecommunications Commission Act, the Competition Act, the Personal Information Protection and Electronic Documents Act and the Telecommunications Act)
  • When an individual requests his/her telephone number, fax number, wireless number, e-mail address, name, and address to be added to the organization's internal do-not-contact list, the organization must add it immediately and keep it on the list for 3 years. (§ N3.3, § N4.2, § N5.4, § N6.2, Canadian Marketing Association Code of Ethics and Standards of Practice)
  • If a recipient makes a request using the contact address info in the e-mail they receive, not to receive any more e-mails, then the sender may not send more e-mails to the recipient more than 10 business days after receipt of the request. Persons acting on behalf of the sender are subject to the sam… (§ 7704(a)(4), Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003, Dec. 16, 2003)