7 Total
2 High severity
4 Medium severity
1 Low severity
Summary

Mailchimp's Acceptable Use Policy sets out the rules governing what users can send, to whom they can send it, and what content is prohibited on the Mailchimp platform. The policy requires users to obtain prior consent from all contacts before sending email campaigns and to provide a functioning unsubscribe mechanism in every message, with opt-out requests honored within ten business days. The policy also prohibits a defined list of content categories including content that promotes illegal activity, involves deceptive subject lines or sender information, distributes malware, or targets minors with age-inappropriate material.

Technical / Legal Breakdown

This document is Mailchimp's Acceptable Use Policy (AUP), which governs the categories of content, contacts, and conduct permitted on the Mailchimp platform and its add-ons, operating as a contractual condition of service use alongside Mailchimp's standard Terms of Use. The agreement states that all users must comply with anti-spam requirements including obtaining proper consent before sending, maintaining functional unsubscribe mechanisms, and honoring opt-out requests promptly; the terms also prohibit specific content categories including material that facilitates illegal activity, promotes hatred or violence, distributes malware, or involves deceptive practices. The policy reserves to Mailchimp unilateral authority to suspend or terminate accounts for violations and to report suspected illegal activity to law enforcement, and establishes that users bear responsibility for ensuring their contact lists and content comply with applicable laws including CAN-SPAM, CASL, and GDPR. The document engages anti-spam regulatory frameworks including the U.S. CAN-SPAM Act enforced by the FTC, Canada's Anti-Spam Legislation (CASL) enforced by the CRTC, and GDPR consent requirements enforced by EU data protection authorities; compliance obligations vary by the jurisdiction of the sender and recipient. Material compliance considerations include the requirement that users maintain documented consent records for contacts and that Mailchimp reserves the right to review account content and contact lists, which may implicate data processor obligations under GDPR and applicable state privacy laws.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial
High — 2 provisions
Medium — 4 provisions
Low — 1 provision

Monitoring

Mailchimp has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Consent and Opt-In Requirements and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured May 20, 2026 12:14 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000886
Version ID CA-V-002787
SHA-256 1a9f4cf950357ed9ee5794b37a173c24b30ed4675e9de97b1cb734ac378b01e0
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans