Spammers ignore both opt-in and opt-out, they do not care about UK or US law. That is where hosting provider enforcement matters.