Lululemon Hit with Over $700K Fine for Spam Email Practices

Activewear giant Lululemon has been penalized $702,900 by the Australian Communications and Media Authority (ACMA) for breaches of Australian spam laws. The ACMA found that Lululemon sent over 370,000 marketing emails between December 2024 and January 2025 without providing recipients with an option to unsubscribe. Source

What Happened?

The investigation revealed that Lululemon improperly categorized commercial messages as service notifications, such as shipping updates and order confirmations. These service emails contained promotional material and direct links to sales, effectively making them marketing communications. According to ACMA member Samantha Yorke, “Providing the ability to opt out is mandatory for marketing messages.” Source

Mischaracterized Service Messages

The ACMA specifically noted that Lululemon “mischaracterised service messages, including delivery and order confirmation emails, that also had a clear marketing purpose.” This practice violated the requirement that all commercial messages include a functional unsubscribe option. Source

Lululemon’s Response and Corrective Actions

In a statement to the ABC, a Lululemon spokesperson stated the company is committed to compliance with all legal and regulatory requirements. Lululemon has initiated an independent review of its spam rule compliance and has updated its standard guest journey emails, including order confirmation and delivery notifications, to ensure ongoing adherence to the rules. Source

Broader Implications and Recent Enforcement

This is not an isolated incident. The ACMA has been actively enforcing spam laws, with five enforcement actions taken in the last 18 months. Other companies penalized for similar violations include CommBank, Telstra, PointsBet Australia, Tabcorp, and Betfair, collectively paying over $14 million in penalties. Source

CAN-SPAM Act Considerations

The Lululemon case highlights the importance of adhering to regulations like the CAN-SPAM Act, which governs commercial email marketing. Key requirements of the CAN-SPAM Act include not using false header information, avoiding deceptive subject lines, clearly identifying messages as advertisements, and including a valid physical postal address. Source Each violation of the CAN-SPAM Act can result in penalties of up to $53,088. Source

Future Regulations: SMS Registration

Looking ahead, organizations using branded identifiers in text messages will be required to register them with the ACMA by July 1, 2026, to prevent messages from being mistaken for scams. Source