Applying for Global Entry shows this checkbox

O3 says this is the result of the CAN-SPAM act.

But Global Entry is operated by U.S. Customs and Border Protection (CBP), which, according to Gemini 2.5 search isn't subject the CAN-SPAM act. Who is hallucinating here? Asking ChatGpt a second time produces an obviously wrong answer