[playpause]

Seems unlikely every marketing email Visa sent during this outage was sent from an actual, valid email address with an inbox. Isn’t that pretty unusual for marketing emails? They’re usually from something like no-spam@domain.

[codingdave]

Agreed. I'm not saying they are in the clear, I'm saying that neither do we have enough information to declare that they definitely broke laws - the law being cited contained both flexibility and ambiguity and it would take some legal research and knowledge to know more.

(And now that I think of it, we aren't even citing the law, we are talking about a summary of the law that is posted online.)