Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →chunkydotdev/email-compliance
Meet CAN-SPAM, GDPR, and CASL email requirements.
Passed 23 of 23 test cases with the skill, and 21 of 23 without it.
2 fixed21 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
An EU resident submits an explicit request for erasure of their personal email data. What is the maximum time limit mandated under GDPR for the organization to fulfill this request and delete the data?
| Checked | Without skill | With skill |
|---|---|---|
| States that GDPR requires fulfillment of an erasure request without undue delay and within 30 days maximum. | Missed | Passed |
The instructions your model reads when the skill loads.
Navigate CAN-SPAM, GDPR, and CASL requirements so your emails are legally compliant across jurisdictions.
domain-authentication - SPF, DKIM, DMARC setup (required for bulk sender compliance)suppression-lists - managing bounces, complaints, and opt-outstransactional-email - sending receipts, auth emails, and notifications (mostly exempt)cold-outreach - B2B cold email that doesn't violate consent lawsMost email senders need to comply with at least one of these. If you send internationally, you likely need all three.
| CAN-SPAM (US) | GDPR (EU/EEA) | CASL (Canada) | |
|---|---|---|---|
| Consent model | Opt-out (can send until they unsubscribe) | Opt-in (need consent before sending) | Opt-in (express or implied consent required) |
| Applies to | Commercial email messages | Any processing of personal data (email address = personal data) | Commercial electronic messages (CEMs) |
| Consent type | Not required to send; must honor opt-out | Explicit consent or legitimate interest | Express consent (never expires) or implied consent (time-limited) |
| Unsubscribe deadline | 10 business days | Without undue delay (typically 30 days max) | 10 business days |
| Physical address | Required in every commercial email | Not required in email itself (but must be available) | Required - sender identification with contact info |
| Sender identification | Accurate From, Reply-To, routing info | Data controller identity must be available | Name and contact info of sender required |
| Record keeping | No specific requirement | Must prove consent was given (timestamp, method, purpose) | Must retain consent records for 3 years after relationship ends |
| Transactional exemption | Yes - mostly exempt from CAN-SPAM rules | Contractual basis covers transactional email | Yes - non-commercial messages exempt |
| Penalties (max) | $51,744 per email (no cap on total) | 4% of global annual revenue or 20M EUR | $10M CAD per violation (business) |
| Enforcement | FTC | National data protection authorities | CRTC |
test cases passed, vs 21 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.