Law / United States / California

Unsolicited Commercial Email Advertisements, False or Misleading Header Information

Cal. Bus. & Prof. Code § 17529.5

In force.

A commercial messages rule binding public and private bodies.

Obligation class
Prohibition, Disclosure

As of .

What it requires

  • Do not advertise in a commercial email sent from California, or sent to a California email address, that contains or is accompanied by a third party's domain name used without permission, falsified, misrepresented, or forged header information, or a subject line you know would likely mislead a recipient, acting reasonably, about a material fact regarding the message's contents.
  • You are not liable under this section if you are an electronic mail service provider only involved in the routine transmission of the email advertisement over your network; you also avoid liquidated damages, though not actual damages, by establishing and implementing practices reasonably designed to prevent a violation.

If you get it wrong

Criminal exposureYes

Private right of actionYes

Criminal exposure note

A violation of section 17529.5 is a misdemeanor punishable by a fine of not more than $1,000, imprisonment in a county jail for not more than six months, or both.

Statutory damages

Liquidated damages of $1,000 for each unsolicited commercial email advertisement transmitted in violation, up to $1,000,000 per incident; reduced to a maximum of $100 per email, up to $100,000 per incident, where the defendant establishes due-care practices reasonably designed to prevent the violation.

As of
Currency
USD

Who enforces it

Enforcement body

The Attorney General, an electronic mail service provider, or a recipient of the unsolicited commercial email may sue.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Section 17529.5(a) makes it unlawful to advertise in a commercial email advertisement sent from California or to a California email address that contains or is accompanied by a third party's domain name used without permission, falsified, misrepresented, or forged header information, or a subject line a person knows would likely mislead a recipient about a material fact regarding the message's contents.

Section 17529.5(b) lets the Attorney General, an electronic mail service provider, or a recipient of the unsolicited commercial email sue for actual damages, or liquidated damages of $1,000 for each violating email up to $1,000,000 per incident (reduced to $100 per email, up to $100,000 per incident, if the defendant shows it had established and implemented due-care practices to prevent violations), plus attorney's fees and costs for a prevailing plaintiff; a claim under this section forecloses a separate claim under sections 17529.8 or 17538.45 for the same email, and there is no cause of action against an email service provider only routinely transmitting the message.

Section 17529.5(c) also makes a violation a misdemeanor punishable by a fine of up to $1,000, imprisonment in county jail for up to six months, or both. The federal CAN-SPAM Act's preemption clause supersedes a state statute that expressly regulates commercial email, except to the extent the state statute prohibits falsity or deception in the message. Section 17529.5's duties are framed as exactly that kind of falsity-or-deception rule, the kind CAN-SPAM's preemption clause leaves in force.

California's broader, non-deception-based commercial-email ban, section 17529.2, is framed instead as a flat ban on any unsolicited commercial email regardless of truthfulness, and is not researched here as a separate instrument for that reason.

When LexLint raises it

When your app profile says your app sends automated outreach.

Back to the example  ·  Lint your app