Email Signature and Disclaimer Laws by Country

TL;DR: Across the UK, US, Canada, Australia, and New Zealand, company disclosure rules for email vary widely, while anti-spam rules are closer to each other. The UK is the strictest on disclosure: the Companies Act 2006 requires four details on every business email. New Zealand comes closest, requiring the company name on every written communication. Australia requires the company name and ACN on “public documents”. Canada’s rule is narrower and the US has no general federal equivalent. The rules that bite harder are the anti-spam laws — PECR in the UK, CAN-SPAM, CASL, the Spam Act 2003, and New Zealand’s Unsolicited Electronic Messages Act. The signature-specific risk is much the same everywhere: a promotional banner or offer in an ordinary employee’s signature can turn a routine email into a regulated commercial message.

Which rules apply depends on the company sending the email and, for anti-spam law, where the recipient is. That’s why an organisation with staff, entities, or customers in more than one country needs the whole picture rather than one country’s rules. This article compares five markets side by side. For the UK in full, see UK Email Footer Legal Requirements: Rules and Templates, which covers the Companies Act 2006 baseline and the extra layers for FCA-regulated firms, solicitors, and charities.

The short version is that the question itself changes from country to country. Where a disclosure rule is strict, as in the UK, the compliance question for a signature is mostly “what must it contain?” Where it’s absent or narrow, it’s mostly “when does this email count as marketing, and what does that trigger?”

Two different kinds of law

Two separate bodies of law touch an email signature, and it helps to keep them apart:

Company disclosure law — rules requiring a company to identify itself on its business correspondence. The UK’s Companies Act 2006 is the strictest example. Its equivalents range from similar (New Zealand) to narrow (Canada) to absent (the US).
Anti-spam law — rules governing commercial electronic messages: consent, sender identification, and unsubscribe mechanisms. Every market in this article has one. They mostly regulate marketing email, but a signature can drag an ordinary email into scope.

The comparison table below summarises both. The country sections that follow explain the detail and the traps.

At a glance

	United Kingdom	United States	Canada	Australia	New Zealand
Company details required on business email?	Yes — name, registration number, place of registration, registered office	No general federal requirement	Name on contracts, invoices, and orders (federal companies)	Name and ACN (or ABN) on “public documents”	Company name on every written communication
Anti-spam law	PECR 2003	CAN-SPAM Act 2003	CASL (2014)	Spam Act 2003	Unsolicited Electronic Messages Act 2007
Consent needed for commercial email?	Yes for individuals and sole traders; not for corporate subscribers	No (opt-out model)	Yes — express or implied	Yes — express or inferred	Yes — express, inferred, or deemed
Unsubscribe processing deadline	No fixed deadline — must be prompt	10 business days	10 business days	5 working days	5 working days
Can a signature banner make an email “commercial”?	In principle yes — any promotional content counts, though the corporate-subscriber rule limits exposure	Rarely — a “primary purpose” test applies	Yes	Yes	Yes
Confidentiality disclaimer legally required?	No	No	No	No	No

United Kingdom: the strictest disclosure rule

Company disclosures. Part 6 of the Company, Limited Liability Partnership and Business (Names and Trading Disclosures) Regulations 2015, made under the Companies Act 2006, requires a UK company to show its registered name, registration number, place of registration, and registered office address on its business letters and other correspondence. It covers documents in electronic form as well as on paper, so we treat external business email as covered. That makes the UK the most prescriptive market in this article. Sector regulators such as the FCA and the SRA add their own requirements on top. The UK footer guide covers each in full.

PECR. The Privacy and Electronic Communications Regulations 2003 govern electronic marketing. Under the ICO’s guidance, the consent rule for marketing email doesn’t apply to corporate subscribers, such as companies and LLPs. Sole traders and some partnerships are treated like individuals, so they need consent (or a qualifying existing-customer relationship). Every marketing email must still identify the sender, give a valid contact address, and offer an opt-out. PECR sets no fixed processing deadline, but requests must be honoured promptly. UK GDPR sits alongside PECR when you process personal data for marketing.

The signature question. PECR is broader than a typical “primary purpose” test, because it covers any advertising or promotional material. In practice the corporate-subscriber position limits the risk for most B2B email, but it doesn’t help with sole-trader recipients or a mixed contact list. The risk profile sits between CAN-SPAM’s and CASL’s.

Company disclosures. There is no US federal equivalent of the UK Companies Act disclosure requirement. A US corporation or LLC is not required by federal law to put its legal name, registration number, or registered address on ordinary business email. State corporate laws don’t generally impose one either. Sector regulators are the exception: financial services, legal services, and other licensed professions have their own rules on communications, advertising, and record-keeping. If you’re in a regulated US sector, check your regulator’s rules directly rather than assuming the general position applies.

CAN-SPAM. The CAN-SPAM Act applies to any email whose primary purpose is commercial — advertising or promoting a product or service — including business-to-business email. There’s no B2B exemption. Unlike the other three laws in this article, CAN-SPAM doesn’t require consent before sending. It’s an opt-out model. A commercial email must:

not use false or misleading header information or deceptive subject lines
identify itself as an advertisement where required
include a valid physical postal address — a street address, a registered PO box, or a registered private mailbox
explain clearly how to opt out, and honour opt-outs within 10 business days

Per the FTC’s CAN-SPAM compliance guide, each non-compliant email can attract a civil penalty of up to $53,088 at the FTC’s most recent inflation adjustment.

The signature question. CAN-SPAM’s “primary purpose” test is the most forgiving of the four regimes for signatures. An email that’s a genuine reply to a customer query, with a small promotional banner in the signature, is generally still a transactional or relationship email. That’s because the FTC looks at the subject line and whether the non-commercial content comes first. It’s a judgement test, not a safe harbour. A salesperson’s email that’s mostly a pitch with a signature attached is commercial regardless of the signature.

Canada: CASL is the strictest regime here

Company disclosures. Under section 10 of the Canada Business Corporations Act, a federally incorporated company must show its name in legible characters on its contracts, invoices, negotiable instruments, and orders for goods or services. That list doesn’t include ordinary email. An email that is an invoice, order, or contract is covered, but a general business email isn’t. Provincially incorporated companies are governed by their own province’s corporate statute, which may have its own naming rule.

CASL. Canada’s Anti-Spam Legislation is the toughest of the four regimes. It’s opt-in. A commercial electronic message (CEM) needs the recipient’s consent, express or implied, before it’s sent, and the sender has to be able to prove it. Every CEM must also:

identify the sender (and anyone on whose behalf it’s sent)
include a mailing address plus a telephone number, email address, or web address, all valid for at least 60 days after sending
include an unsubscribe mechanism that is processed within 10 business days

Administrative penalties reach up to $10 million per violation for an organisation, per the CRTC’s CASL guidance.

Two exemptions matter for everyday business email:

Business-to-business and relationship messages. Messages sent within an organisation, or to another organisation you have an ongoing relationship with, about that relationship are exempt. So are replies to an enquiry or request.
Implied consent by conspicuous publication. Someone who has conspicuously published their business email address — with no “no marketing” statement — can receive messages relevant to their role.

The signature question. This is where CASL catches people out. A CEM is defined by content, not by intent. A message whose purpose is partly to encourage participation in a commercial activity — which a “Book a demo” banner or “20% off this month” line plainly is — can become a CEM. A routine email to a Canadian prospect you have no relationship with, carrying a promotional signature banner, is a genuine CASL risk in a way it largely isn’t under CAN-SPAM. The practical rule: be deliberate about which signatures carry marketing content, and who those employees email.

Australia: ACN on public documents, and the Spam Act

Company disclosures. Section 153 of the Corporations Act 2001 requires a company to show its name on all its “public documents”. If the ACN isn’t part of the name, the company must also show “Australian Company Number” followed by the ACN. An ABN can be used instead if its last nine digits match the ACN, which for a company they always do. “Public documents” explicitly include business letters, invoices, receipts, statements of account, and orders. The Act doesn’t say in so many words that an email is a business letter. Treating it as one, and putting the company name and ACN or ABN in the signature, is the prudent reading and the common practice.

The Spam Act 2003. Australia’s regime is opt-in, like Canada’s. A commercial electronic message needs consent, express or inferred. Inferred consent includes a CASL-style conspicuous-publication rule for business addresses. The message must also:

identify the individual or organisation that authorised it, with accurate contact details
include a functional unsubscribe facility, working for at least 30 days, and processed within 5 working days

The ACMA enforces it actively. As the ACMA’s own guidance on avoiding spam sets out, “factual” or “service” labelling doesn’t protect a message that also promotes something. In 2024, the Commonwealth Bank paid a $7.5 million penalty after sending messages it had classified as non-commercial that in fact promoted its products.

The signature question — with a useful carve-out. The Spam Act has a specific rule that helps ordinary signatures. A message that contains no more than factual information is a “designated commercial electronic message”, even with the sender’s name, logo, and contact details added, or the employer’s name, logo, and contact details. It’s exempt from the consent and unsubscribe requirements, though it must still identify the sender. In plain terms: a standard signature doesn’t turn a factual email into spam. A promotional banner is a different matter. Once the message carries promotional content beyond name, logo, and contact details, the carve-out falls away. That’s exactly the pattern the ACMA’s recent enforcement has targeted.

New Zealand: the closest to the UK

Company disclosures. New Zealand is the only other market here with a rule close to the UK’s. Section 25 of the Companies Act 1993 requires a company to state its name clearly in every written communication sent by or on its behalf. The name must be the registered name, including “Limited”, not just a trading name. Email is a written communication. The requirement is lighter than the UK’s — the name only, not a registration number or registered office — but it applies to every email, not just invoices and contracts. The risk of getting it wrong is also personal: someone who signs or issues a document for a company without the company’s name can end up personally liable for the obligation.

The Unsolicited Electronic Messages Act 2007. New Zealand’s anti-spam law is modelled closely on Australia’s. It covers commercial electronic messages with a “New Zealand link” — sent to, from, or within New Zealand. It requires:

consent (express, inferred, or deemed)
accurate information about who authorised the message
a functional unsubscribe facility, with requests taking effect within 5 working days

The Department of Internal Affairs enforces it, and the DIA’s guidance for businesses notes penalties of up to $500,000 for an organisation.

The signature question. The same logic as Australia applies. Identification and contact details are expected; promotional content is what changes a message’s character.

What this means for a multi-country signature setup

If your organisation has staff or entities in more than one of these markets, a few practical conclusions follow.

The legal-entity footer varies by entity, not by where the recipient is. Company disclosure rules attach to the company sending the email. A UK entity’s staff need the Companies Act details, a US entity’s staff need nothing at federal level (but check state and sector rules), an Australian entity’s staff need the company name and ACN or ABN, and a New Zealand entity’s staff need the registered company name. This is the multi-entity variant problem covered in how to set email disclaimers by department, office or country. Staff location and legal entity aren’t always the same thing, and that’s a question for legal counsel.

Promotional banners are a jurisdictional decision, not just a marketing one. Banners in employee signatures are a legitimate and effective channel. Sales email signature best practices covers how to use them well, and UTM tracking for signature links covers how to measure them. But a banner that’s harmless on a US reply can change a Canadian or Australian email’s legal character. Organisations emailing heavily into Canada should decide deliberately which staff carry promotional signature content, and whether it’s appropriate for cold outreach.

Confidentiality disclaimers remain optional everywhere. None of these five countries legally requires the familiar “this email is confidential and intended only for the addressee” paragraph. It’s a convention, and its legal effect is widely doubted. If your footer is getting long, that’s the first candidate to shorten — not the entity details.

Marketing emails need their own compliance path. Newsletters and campaigns sent through a marketing platform have to meet each anti-spam law’s consent, identification, and unsubscribe rules in full. An employee signature is not a substitute for any of that, and those rules sit in the marketing platform, not the signature.

Frequently asked questions

Does a company outside the US need to comply with CAN-SPAM?

Yes, if the emails are commercial and sent to US recipients. CAN-SPAM applies regardless of where the sender is based. It’s an opt-out model, so no prior consent is needed. Commercial messages still need a valid postal address, a working opt-out, and honest header and subject information. Your home-country disclosure rules, such as the UK Companies Act details, still apply to the same email too, because those attach to the sending company.

The Companies Act disclosure rules apply to UK-registered companies, so a US company with no UK entity isn’t bound by them. A UK company, or a UK branch registered as an overseas company, is. What does reach a US sender is PECR: marketing emails to UK recipients need to meet its consent, identification, and opt-out rules, and UK GDPR can apply where you process UK residents’ personal data.

Does CASL apply to a business with no Canadian office?

Yes. CASL applies to commercial electronic messages sent to, or accessed from, a computer system in Canada, whatever the sender’s location. A business sending marketing emails to Canadian recipients, wherever it’s based, needs Canadian-standard consent and identification. So does one sending ordinary emails that carry promotional signature content.

Does a logo in my email signature make an email commercial under the Spam Act?

No. Australia’s Spam Act specifically allows a message of factual information to include the sender’s or employer’s name, logo, and contact details without becoming a regulated commercial message. What changes the position is promotional content beyond that — an offer, a product banner, or a call to action promoting goods or services.

Do Australian companies have to put their ACN in every email signature?

Section 153 of the Corporations Act requires the company name and ACN (or an ABN containing it) on “public documents”, which include business letters, invoices, receipts, and orders. The Act doesn’t expressly say an email is a business letter, but treating business email that way is the prudent and common approach. Many Australian companies include the ACN or ABN in every staff signature for that reason.

Is New Zealand’s company-name rule the same as the UK’s?

It’s similar but lighter. The UK Companies Act requires four details: registered name, registration number, place of registration, and registered office address. New Zealand’s Companies Act 1993 requires the registered company name, including “Limited”, on every written communication. It doesn’t require a registration number or address. Like the UK rule, it applies to ordinary business email, not just invoices and contracts.

Which of these laws requires an email confidentiality disclaimer?

None of them. Confidentiality disclaimers aren’t legally required in the UK, US, Canada, Australia, or New Zealand. They’re a widespread convention with limited legal effect. The legally required elements are the company disclosures (where they apply) and the anti-spam requirements for commercial messages.

Correction, 20 October 2026: an earlier version cited the Companies (Trading Disclosures) Regulations 2008 for the UK rule. They were revoked on 31 January 2015 and replaced by Part 6 of SI 2015/17, which this article now cites.

This article is for general informational purposes and does not constitute legal advice. Requirements vary by organisation type, sector, and — within Canada — by province. If you are uncertain about your specific obligations, seek advice from a qualified lawyer in the relevant jurisdiction. Information correct as of October 2026 — verify current requirements against each regulator’s published guidance.

SigHQ is building an add-in-first email signature management tool for Microsoft 365 organisations of 50–250 employees, with rules-based signature and disclaimer assignment by department, office, or legal entity. Join the waitlist to follow progress.