I think technically the CAN-SPAM act applies to an international company with any US customers, but in practice no company primarily in another country cares about that US law.

Maybe if the US was willing to perform an air strike on each business that violated CAN-SPAM we'd get some real compliance.