The company I am working at is having to go through each application that sends e-mails and verify compliance with CAN SPAM. One of the requirements is a corporate opt out system that ensures once someone has opted out, they will never get an e-mail from you again.