Comments:

The resale of e-mail addresses by companies to any individual should be considered an aggravated violation; I know for a fact that many major ISPs abuse the fact that customers have chosen to utilize their services by selling their e-mail addresses via automated processes to various UCE sources; specifically, I once had an America Online account, and chose to generate a new screen name (and hence a new, original, hard-to-brute-force, unharvestable, email address). This screen name was signed onto once, then signed off for a day, with no activity other than actual sign-on occuring (i.e. no usage of email or internet at all). This name, upon checking the next day, had received a couple of pieces of email that were clearly unsolicited commercial email, simply by the false email address and "synthetic-feeling" subject lines. This sale of email addresses to UCE sources is a breach of the user's trust in their ISP, and it is detrimental to the receipt of (potentially critical) legitimate e-mail, such as tax return confirmation or a note from a family member overseas in the military. Regarding the 10-business-day opt-out request compliance, this is a ridiculously large amount of time to remove one email address from a digitally stored list. An opt-out system should be automated in such a fashion that the list will destroy without delay, the sender of an 'unsubscribe' demand who has properly complied with the unsubscribe directions. To allow for issues with server downtimes, etc. I propose a three-business-day period as opposed to ten. Two weeks straight of spam is not acceptable when I have demanded a stop IMMEDIATELY, because e-mail is a primary medium of communication for me, and many others, and I refuse to put up with UCE-bombing while "the request is being processed." If small business wishes to use e-mail as an advertising medium, a simple "AD:" at the beginning of the subject line would be sufficient, as this filter can be added to clients easily and thus anyone wishing to "drop the spam" could simply filter this out. Also, proper unsubscribe must be present and must function upon request.