This is one of the problems with current legislation (CAN SPAM). My understanding is that individuals don’t have standing to sue, but instead all they can do is report issues to the government and hope they do something about it.
Yep. And even worse states aren’t allowed to give individuals standing to sue either under the preemption clause (expect for in cases of deceptive advertising via email).