Does AI-written marketing email still need consent?
Yes. Consent rules care about who receives a marketing email, not who or what wrote it. The EU and UK need prior consent, with a narrow exception for existing customers; Canada needs express or implied consent; the US doesn't require opt-in but does require a working opt-out and a postal address. Gmail and Yahoo add one-click unsubscribe and a spam rate under 0.3% for bulk senders.
Unitpost ·
An agent can write a campaign in a minute and send it in another. The speed is new; the rules aren't. Every consent law below asks who receives the email and whether they agreed, and none of them asks whether a person or a model wrote it.
What does each law require?
- United States (CAN-SPAM). No opt-in is required in general. Each message needs accurate headers, a subject that doesn't mislead, identification as an ad, a valid physical postal address and a clear way to opt out, and an opt-out must be honored within 10 business days. The FTC lists penalties of up to $53,088 per email (FTC compliance guide).
- European Union (ePrivacy Directive, Article 13). Marketing email to individuals needs their prior consent. The exception: a business that got a customer's address in a sale may market its own similar products, if the customer could object when the address was collected and can object in every message (Directive 2002/58/EC).
- United Kingdom (PECR, regulation 22). The same rule: prior consent, with a "soft opt-in" for your own similar products sold or negotiated with that person, and a refusal offered at collection and in every message. Since 5 February 2026 charities have a soft opt-in of their own (PECR regulation 22).
- Canada (CASL). Consent is required. Express consent lasts until it's withdrawn; implied consent covers cases such as an existing business relationship, for up to two years (six months after an inquiry). Each message identifies the sender with a mailing address and a contact method, and an unsubscribe must be actioned within 10 business days (Government of Canada).
This is a summary of the rules as published, not legal advice. Your list, your country and your recipients' countries decide which apply.
What do Gmail and Yahoo add?
The mailbox providers enforce their own rules, whatever the law allows:
- Gmail counts you as a bulk sender once you send close to 5,000 messages a day to personal Gmail accounts, and the status is permanent. Bulk senders need SPF, DKIM, DMARC and an aligned From; marketing mail needs one-click unsubscribe (RFC 8058), and a mailto link in the body doesn't count; the spam rate must stay under 0.3% (Gmail sender guidelines).
- Yahoo publishes no volume threshold. It asks for the same authentication, a one-click List-Unsubscribe header on marketing mail, unsubscribes honored within 2 days, and a spam rate under 0.3% (Yahoo sender best practices).
Mail an unconsented list and complaints come fast: a few people per thousand clicking "Report spam" is all 0.3% takes.
Where do AI agents go wrong?
Not in the writing. In three steps around it:
- Building the list. "Find 200 CTOs at fintech startups and email them" is cold outreach, whatever the model's copy says. The people never agreed, so in the EU, UK and Canada there's no consent to rely on, and in the US the complaint rate does the damage instead.
- Reusing a list for something new. A customer who agreed to product updates didn't agree to a partner's offer. Keep separate topics, and have the agent send only to the topic the mail is about.
- Skipping the opt-out. An agent that sends marketing through a transactional endpoint, one message at a time, can leave out the unsubscribe link and header that a campaign would add.
How does Unitpost enforce this?
- The rules are in the terms. The Acceptable Use Policy prohibits cold outreach (unsolicited sales, prospecting or partnership email, B2B included) and scraped, bought or rented lists on every plan, and the MCP server's instructions tell agents the same.
- Every marketing email carries an unsubscribe. A send in the marketing category always gets the footer link and the
List-UnsubscribeandList-Unsubscribe-Postheaders, and a template save that drops the unsubscribe link is refused. - One-to-many marketing goes through campaigns. A marketing send to more than one recipient on the transactional API is refused with
422, because each recipient needs their own unsubscribe link. - Topics. Contacts opt out of one topic, such as product updates, and keep receipts and other topics.
An agent can still draft, segment and schedule the campaign. The part that stays with a person is deciding who agreed to hear from you, and an approval step before anything one-to-many goes out (how).