Are your activities governed by the CAN-SPAM Act? What does the CAN-SPAM Act require? What are the consequences of violating the CAN-SPAM Act? Are you required to post a privacy policy? Is it okay to copy someone else’s privacy policy? The Controlling the Assault of Non- Solicited Pornography and Marketing Act of 2003 (the CAN-SPAM Act), which became effective in January of 2004, was enacted to stop abusive emails, but is of the most concern to the least abusive emailers. California was the first state to enact a law requiring all commercial websites that collect personal information from consumers to post a privacy policy. These laws, and their application to organizations providing continuing legal education, will be discussed.