If your outreach touches more than one country, the honest answer to "how fast do I have to process an unsubscribe" is "it depends where the recipient is" — the fastest jurisdiction covered in this cluster gives you roughly half the time the slowest one does. Building your unsubscribe handling around the tightest applicable standard is the simplest way to stay compliant everywhere at once.
Each law in this cluster sets its own honor-by timeline and its own rules for how long the opt-out mechanism itself has to stay functional. Some, like the UK's PECR, don't specify an exact day count at all and instead expect "prompt" action — which sounds looser but carries its own risk, since "prompt" is a standard a regulator interprets after the fact rather than a fixed number you can build a process against.
| Jurisdiction | Honor request within | Mechanism must stay valid |
|---|---|---|
| Canada (CASL) | 10 business days | 60+ days post-send |
| United States (CAN-SPAM) | 10 business days | 30+ days post-send |
| Australia (Spam Act) | 5 business days (enforcement benchmark) | No fixed statutory period; must work continuously |
| United Kingdom (PECR) | No fixed day count — must be "prompt" | Ongoing "do not contact" list expected |
| EU general (GDPR right to object) | "Without undue delay" | Ongoing — objection is permanent once made |
| Germany (UWG, consent-based) | Immediate — withdrawal of consent stops processing | Ongoing |
CASL and CAN-SPAM both give you 10 business days to honor a request, but they differ on how long the opt-out mechanism itself has to stay live afterward — CASL requires 60+ days, CAN-SPAM requires 30+ days. See our CASL guide and CAN-SPAM guide for the full requirements each law layers on top of the timeline.
ACMA's enforcement pattern treats continuing to send past five business days after an unsubscribe request as a violation — see our Australia guide for the enforcement examples this benchmark comes from.
The absence of a specific day count under PECR and GDPR's right to object doesn't mean there's no deadline pressure — it means a regulator judges reasonableness after the fact rather than you having a bright-line number to build around. Treating these as "act within days, not weeks" is the safer practical interpretation.
Since German email marketing requires prior express consent under UWG §7 rather than starting from an implied-permission default, an opt-out functions as a withdrawal of that consent — the legal basis for continuing to email disappears the moment it happens, which is a stricter effective standard than any of the day-count regimes above.
Building one unsubscribe SLA and assuming it covers every market: a process built around CASL and CAN-SPAM's 10-business-day standard will fail Australia's 5-business-day enforcement benchmark. If your list spans jurisdictions, build for the tightest one.
Most cold email platforms — Smartlead, Instantly, and similar tools — handle unsubscribe mechanics automatically once configured correctly, but the default configuration doesn't always match the fastest jurisdiction you're sending into. It's worth confirming your platform's suppression-list processing time against the table above rather than assuming the default is fast enough everywhere.
Australia, based on ACMA's enforcement pattern — continuing to send past five business days after an unsubscribe request has been treated as a violation, tighter than Canada and the US's 10-business-day standards.
No. UK PECR requires action to be "prompt" and GDPR's right to object requires action "without undue delay," without specifying an exact day count — which means a regulator assesses reasonableness after the fact rather than giving senders a fixed number to build a process around.
The tightest one that applies to any recipient on your list. In this cluster, that's Australia's five-business-day enforcement benchmark — building your suppression-list processing around that timeline satisfies every other jurisdiction's slower requirement automatically.
Not in the same sense as the day-count laws. Because German email marketing requires prior express consent, an opt-out functions as withdrawing that consent, which removes the legal basis to continue emailing immediately rather than on a countdown.
Related guides
Written by
Scott Holmes
AI systems consultant based in Barrie, Ontario. Founder of Pinnacle Tech Projects. Has built unsubscribe handling for cold email systems operating across multiple regulatory regimes.
Answer four quick questions and get a tool recommendation for your setup.