What are the one-click unsubscribe requirements for Gmail and Yahoo, and how do they relate to CAN-SPAM compliance?

Summary

Gmail and Yahoo's new requirements mandate one-click unsubscription for commercial emails, a stricter interpretation of the CAN-SPAM Act's existing opt-out provisions. This requires implementing a List-Unsubscribe header (preferably using List-Unsubscribe-Post with HTTPS), providing a clear and functional unsubscribe link in the email body, and ensuring the unsubscribe process can be completed with a single click. While preference centers are permissible, they cannot be the sole method for unsubscribing from all emails. Compliance enhances user experience, improves sender reputation, reduces the likelihood of emails being marked as spam, and prevents potential blacklisting. Senders should adhere to the technical specifications outlined in RFC 8058 for List-Unsubscribe-Post implementation and adapt their practices to comply with these evolving regulations.

Key findings

  • One-Click Mandate: Gmail and Yahoo require one-click unsubscription, a stricter enforcement of CAN-SPAM.
  • List-Unsubscribe is Key: Implementation of the List-Unsubscribe header (especially List-Unsubscribe-Post) is critical.
  • HTTPS Recommended: Using HTTPS for List-Unsubscribe-Post is strongly recommended.
  • Improved Deliverability: Compliance leads to better sender reputation and improved email deliverability.
  • CAN-SPAM Compliant Page: Unsubscribe link must lead to a CAN-SPAM compliant page.

Key considerations

  • Technical Implementation: Follow RFC 8058 guidelines for proper List-Unsubscribe-Post implementation.
  • Visible Link: Ensure the unsubscribe link is easily visible and functional within the email body.
  • Preference Centers vs. One-Click: If offering a preference center, also provide a one-click unsubscribe option for all emails.
  • Spam & Blacklisting Risk: Failure to comply risks emails being marked as spam and potential blacklisting.
  • Bulk Sender Compliance: Bulk senders must update practices to align with Gmail and Yahoo's new guidelines.

What email marketers say
7Marketer opinions

The new Gmail and Yahoo requirements mandate one-click unsubscription for marketing emails, building on the existing CAN-SPAM Act's opt-out provisions. Compliance involves implementing List-Unsubscribe headers and ensuring a clearly visible unsubscribe link. This improves user experience, enhances sender reputation, and reduces the likelihood of emails being marked as spam. While preference centers can be offered, a one-click unsubscribe option must always be available.

Key opinions

  • One-Click Mandate: Gmail and Yahoo are enforcing one-click unsubscription to enhance user experience.
  • CAN-SPAM Alignment: New policies build on CAN-SPAM's existing opt-out requirements, making them stricter.
  • Improved Deliverability: Implementing one-click unsubscribe improves sender reputation and email deliverability.
  • Preference Centers: Preference centers are allowed, but a one-click unsubscribe option is still mandatory.

Key considerations

  • List-Unsubscribe Headers: Implement List-Unsubscribe headers for one-click functionality.
  • Visible Unsubscribe Link: Ensure all marketing emails include a clearly visible unsubscribe link.
  • Sender Reputation: Prioritize easy unsubscription to reduce spam complaints and protect sender reputation.
  • Blacklisting Risk: Non-compliance can lead to faster blacklisting and reduced deliverability.
Marketer view

Email marketer from Reddit explains that CAN-SPAM has always required a way to unsubscribe, but the new Gmail and Yahoo policies are stricter, essentially enforcing one-click unsubscribe to improve user experience. They share that not complying can get you blacklisted faster than before.

July 2023 - Reddit
Marketer view

Email marketer from Sendinblue shares that implementing one-click unsubscribe can enhance your sender reputation and improve email deliverability. They explain that making it easy for recipients to unsubscribe reduces the chances of them marking your emails as spam, which can negatively impact your sending reputation.

June 2023 - Sendinblue
Marketer view

Email marketer from Mailjet shares that to comply with the new Gmail and Yahoo requirements, senders must implement one-click unsubscription and ensure that all marketing emails include a clearly visible unsubscribe link. They explain that this improves the user experience and reduces the likelihood of emails being marked as spam. They suggest using List-Unsubscribe headers for one-click functionality.

April 2024 - Mailjet
Marketer view

Email marketer from Email Marketing Forum explains that you can offer a preference center, but you still need a one-click unsubscribe option to comply with both CAN-SPAM and the new Gmail/Yahoo requirements. The preference center cannot be the *only* way to unsubscribe from *all* emails.

April 2023 - Email Marketing Forum
Marketer view

Email marketer from Litmus explains that the new Gmail and Yahoo requirements, including one-click unsubscribe, will force email marketers to clean up their lists and follow best practices. They explain that it is a good thing for the industry, reducing spam and improving the overall email experience.

September 2021 - Litmus
Marketer view

Email marketer from EmailToolTester explains that the new one-click unsubscribe requirements from Gmail and Yahoo are designed to protect users from unwanted emails and reduce spam. They emphasize that senders who fail to comply risk having their emails marked as spam and hurting their deliverability.

April 2023 - EmailToolTester
Marketer view

Email marketer from Email Geeks shares that a "one step" unsubscribe has been required by Federal law for 20 years, ever since CAN-SPAM became law.

May 2022 - Email Geeks

What the experts say
5Expert opinions

The one-click unsubscribe requirements from Gmail and Yahoo necessitate a non-interactive unsubscribe mechanism, typically achieved through List-Unsubscribe headers (mailto: or List-Unsubscribe-Post) and a visible unsubscribe link leading to a CAN-SPAM compliant page. It's recommended to use HTTPS links and List-Unsubscribe-Post for optimal functionality. While preference centers can be offered, a single-click unsubscribe option must always be available to comply with both CAN-SPAM and the new mandates. Proper implementation of the List-Unsubscribe-Post header is essential, and bulk senders should carefully review the new guidelines to adapt their email marketing practices.

Key opinions

  • Non-Interactive Unsubscribe: Requires a non-interactive unsubscribe option via List-Unsubscribe headers.
  • Visible Unsubscribe Link: A visible unsubscribe link must be present in the body of the email.
  • Preference Centers: Preference centers are permissible if a single-click unsubscribe option is also provided.
  • HTTPS Recommendation: Using HTTPS links for List-Unsubscribe is recommended.

Key considerations

  • List-Unsubscribe-Post Implementation: Properly implement the List-Unsubscribe-Post header for one-click functionality.
  • CAN-SPAM Compliance: Ensure the unsubscribe process adheres to CAN-SPAM regulations.
  • Bulk Sender Guidelines: Bulk senders need to adapt their email marketing practices to comply with new Gmail and Yahoo guidelines.
  • GET vs. POST: POST requests to the unsubscribe URL should unsubscribe the user, while GET requests should display a confirmation page.
Expert view

Expert from Spam Resource explains and details how to implement the List-Unsubscribe-Post header, which is essential for one-click unsubscribe functionality. The article outlines the proper syntax and methods for utilizing this header to comply with modern email regulations and enhance user experience.

May 2021 - Spam Resource
Expert view

Expert from Word to the Wise explains the new requirements for bulk senders regarding email authentication and one-click unsubscribe, interpreting the guidelines from Gmail and Yahoo. He shares how these changes impact email marketing practices and compliance strategies.

October 2023 - Word to the Wise
Expert view

Expert from Email Geeks explains that the requirement is a non-interactive unsubscribe via a List-Unsubscribe header (either mailto: or List-Unubscribe-Post) and a visible unsubscribe link in the body of the message that goes to a regular CAN-SPAM compliant page with a single unsubscribe button.

December 2023 - Email Geeks
Expert view

Expert from Email Geeks explains that as long as a user can also unsubscribe from all mail by clicking one obvious button and nothing else, a preference center is acceptable under CAN-SPAM.

January 2023 - Email Geeks
Expert view

Expert from Email Geeks recommends having a List-Unsubscribe header with only an https link, and a List-Unsubscribe-Post header to enable non-interactive unsubscribe. POSTs to that URL should unsubscribe the user, and GETs to that URL MUST display a user-readable page with an unsubscribe-me button.

July 2022 - Email Geeks

What the documentation says
4Technical articles

Gmail and Yahoo require one-click unsubscription for commercial emails, aligning with the CAN-SPAM Act's mandate for easy opt-out options. This is achieved through List-Unsubscribe headers and clear, functional unsubscribe links. RFC 8058 provides the technical specifications for implementing List-Unsubscribe-Post for HTTP POST-based unsubscription. Senders who make unsubscribing difficult risk having their messages marked as spam.

Key findings

  • One-Click Requirement: Gmail and Yahoo mandate one-click unsubscription for commercial emails.
  • List-Unsubscribe Header: Implementing the List-Unsubscribe header is essential for compliance.
  • CAN-SPAM Alignment: New policies reinforce CAN-SPAM's requirement for easy opt-out.
  • Spam Penalties: Failure to provide easy unsubscription may result in emails being marked as spam.

Key considerations

  • Clear Unsubscribe Link: Ensure unsubscribe links are clearly visible and functional.
  • RFC 8058: Utilize RFC 8058 for technical guidance on List-Unsubscribe-Post implementation.
  • Prompt Opt-Out Handling: Honor opt-out requests promptly, as mandated by CAN-SPAM.
  • Authentication: Both Gmail and Yahoo also require authentication, alongside the unsubscribe requirements.
Technical article

Documentation from Yahoo Mail Blog shares that similar to Gmail, Yahoo requires easy unsubscription options for users. They state that emails should include an unsubscribe link that is clearly visible and functional, allowing users to opt out of receiving further communications with a single click. They also require authentication.

July 2021 - Yahoo Mail Blog
Technical article

Documentation from RFC Editor shares that RFC 8058 defines the List-Unsubscribe-Post header field, designed to enable one-click unsubscription via HTTP POST requests. This documentation details the technical specifications for implementing and handling these requests.

April 2024 - RFC-8058
Technical article

Documentation from Google Workspace Updates explains that senders must support one-click unsubscribe for commercial emails. This requires including a List-Unsubscribe header and ensuring the unsubscribe process can be completed in a single click. They also note that senders who make unsubscribing difficult will have their messages marked as spam.

June 2024 - Google Workspace Updates
Technical article

Documentation from FTC explains that the CAN-SPAM Act mandates a clear and conspicuous explanation of how the recipient can opt-out of receiving future emails from you. They must give a return email address or another easy Internet-based way to allow people to communicate their choice to you, and you must honor opt-out requests promptly.

April 2023 - FTC.gov