CAN-SPAM is the US federal law regulating commercial email, requiring accurate header and subject-line information, clear identification of an email as an advertisement, a working opt-out mechanism, and prompt honoring of opt-out requests. It applies to financial services marketing emails alongside sector-specific rules like Regulation Z and UDAAP.