You may have to complete appropriate consent and authorization forms so, again, speak to a lawyer. (holnesslawgroup.com)
• Service Providers: An organization is accountable for commercial electronic marketing performed for the organization by its service providers, and is responsible for ensuring that its service providers obtain appropriate consent for the collection, use and disclosure of personal information for commercial electronic marketing purposes. (exchangemagazine.com)
• Due Diligence — Purchased Lists: If an organization intends to send commercial electronic messages using an address list purchased from an address list vendor, the organization should make appropriate enquiries to ensure that the vendor obtained appropriate consent to the collection and use by the organization of the listed addresses. (exchangemagazine.com)