Relationship messages (like incident reports and bills) aren't typically covered by the CAN SPAM Act, but that law's never stopped anyone anyway. I don't have enough fingers to count the number of daily commercial emails from otherwise respectable US businesses that don't include a mailing address or don't honor opt-out requests. Cold sales mails from tech startups are a big offender...