Canada’s Anti-Spam Legislation Resource Centre

Subject to limited exceptions, CASL requires consent (either express or implied) for the sending of commercial electronic messages and that each message include prescribed contact information for the sender as well as an unsubscribe mechanism

Express Consent:

CASL prescribes requirements for obtaining express consent. In making a request to obtain express consent, an organization must set out “clearly and simply” the following information orally or in writing:

• the purpose for which consent is being sought;
• the name by which the person seeking consent carries on business, if different from their name, if not, the name of the person seeking consent;
• if the consent is sought on behalf of another person, the name by which the person on whose behalf consent is sought carries on business, if different from their name, if not, the name of the person on whose behalf consent is sought;
• if consent is sought on behalf of another person, a statement indicating which person is seeking consent and which person on whose behalf consent is sought;
• the mailing address, and either a telephone number providing access to an agent or a voice messaging system, an email address or a web address of the person seeking consent or, if different, the person on whose behalf consent is sought; and
• a statement indicating that the person whose consent is sought can withdraw their consent.

Implied Consent:

Under the CASL, implied consent to send a commercial electronic message exists in circumstances where there is an “existing business relationship” or an “existing non-business relationship.” An existing business relationship is defined in the act to include, among other things, a business relationship arising out of:

• the purchase or lease of goods or services two years before the day on which the message was sent;
• a written contract between the recipient and sender, if currently in existence or expired within two years before the message was sent; or
• an inquiry or application related to the above between the recipient and the sender six months before the day on which the message was sent.

Implied consent also exists in the business-to-business context where the recipient has conspicuously published or provided his or her electronic address to the sender without indicating a wish not to receive unsolicited commercial electronic messages at that address and the message relates to the recipient’s business role.

Content & Unsubscribe Requirements:

• In all of the above circumstances, the commercial electronic messages must set out prescribed information that identifies the sender, methods to contact the sender, and an unsubscribe mechanism that enables the recipient to indicate, at no cost, the desire to no longer receive the messages–or a class of messages–from the sender.
• Additional details are also required within the commercial electronic message when the message is being sent on behalf of another person.