CAN-SPAM and GDPR (for Europe) require you to protect user’s privacy and avoid sending emails to purchased lists.