CAN-SPAM, CASL, and GDPR carry real penalties per violation. The fines, the famous cases, and the checklist that keeps you safe.