I gave you a sample law. Non-commercial sites must still provide a way to opt out, and in this case it is the usercp option. I, personally, if I found that a site does not have such option, would immediately change my e-mail to something fake and never visit such site again. If you are trying to create a system, you must not limit the privacy of your users...