The new anti-spam and anti-spyware legislation has such a broad reach and is so complex that organizations that conduct business online will need to reassess their business practices.