[angry_dane]

Ebay sends these mails asking you to update your personal information in order to 'improve security'.

There is no opt-out option, and it is doubtful that updating your address will actually improve 'security' in any meaningful sense.

Therefore, this is a veiled attempt at gathering user data for commercial purposes, and there is no opt-out, thus violating the CAN-SPAM act?

https://www.ecfr.gov/cgi-bin/retrieveECFR?gp=1&SID=cea8be427...

[ghastmaster]

> Ebay sends these mails asking you to update your personal information in order to 'improve security'.

The question is then, "Does providing updated personal information improve security?"

I can think of a scenario where this would be true. I have an account somewhere that has an email address that is no longer in my possession. By updating my information, my account is more secure. I think it is plausible that updating other information would improve security as well.

[angry_dane]

Well, they are sending this mail to an email you do have control over. Maybe you have another example?

[ghastmaster]

If your phone number needs to be updated and you have not, that would be something that could be used to aid in an attack if the wrong person was now using it. By sending an email, you can become aware of it without being in control of the phone number any longer.

[hetspookjee]

I agree with you. I also am having increasingly fewer faith in corporations making these requests for the security reasons they state. Facebook and their abuse of this data has really ruined it for me.