Past customers: yes. An existing business relationship is the classic legitimate basis, and CAN-SPAM permits commercial mail with honest identification and a working unsubscribe. Adding customers to routine service emails automatically is normal; adding them to a MARKETING newsletter deserves a one-line ask or at least an obvious first-email opt-out.
Networking-event cards: legally workable in the U.S., but etiquette earns more than law allows. A personal 'great meeting you, want the monthly tips email?' converts a handshake into a subscriber; silently bulk-importing a card stack converts it into spam reports.
The universal rules regardless of source: identify yourself, unsubscribe honored instantly, and never let anyone wonder how you got their address.