Although buying an email list is legal, it's not a good idea because these people haven't chosen to receive emails from your company. Without express permission from people, you run the danger of breaking laws depending on where the recipient lives.