Canada's Law on Spam and Other Electronic Threats
No endorsement of any products or services is expressed or implied.
Spam Warnings
Be aware of recent warnings and notices from the agencies responsible for enforcing Canada's Anti-Spam Law.
- Beware of emails and calls claiming to represent the CRA – November 10, 2015
Enforcement Actions
Be aware of recent actions taken by the agencies responsible for enforcing Canada's
Anti-Spam Law.
- Office of the Privacy Commissioner of Canada - Investigation of Compu-Finder – May 27, 2016
- CRTC serves its first-ever warrant under CASL in botnet takedown – December 3, 2015
- CRTC - Undertaking: Rogers Media Inc. –
November 20, 2015 - CRTC - Undertaking: Porter Airlines Inc. – June 29, 2015
About the law
Canada's anti-spam legislation (CASL) came into effect July 1, 2014. It is in place to protect Canadians while ensuring that businesses can continue to compete in the global marketplace.
If you use electronic channels to promote or market your organization, products or services, Canada's new anti-spam law may affect you.
On January 15, 2015, new rules about installing computer programs came into force. It is now illegal to install programs, such as malware, on someone's computer without consent.
It is your duty to understand and comply with the law.
Compliance Basics
Q:
Do you use email, SMS, social media or instant messaging to send commercial or promotional information about your organization to customers, prospects and other important audiences?
Q:
Do you install software programs on people's computers or mobile devices?
Q:
Do you carry out these activities in or from Canada?
To send a commercial electronic message to an electronic address, you need to have the recipient's consent, to identify yourself, to offer an unsubscribe mechanism and to be truthful.
- Consent: You must have a form of valid consent.
How can I obtain express consent?
What's the difference between express consent and implied consent? - Identification: Clearly identify yourself and your organization. You must include your mailing address. You must also include a phone number for accessing an agent or a voice messaging system, an email address, or a web address for you or the person on whose behalf you are sending the message.
- Unsubscribe mechanism: Provide an unsubscribe mechanism that is functional for 60 days. See examples of acceptable unsubscribe mechanisms.
- Truth in advertising: Your messages must not be false or misleading. They must not have false or misleading sender information, subject matter information, URLs and/or metadata.
To install a program on someone else's computer or mobile device, you must have his/her express consent. Learn more about how to obtain consent in this case.
CASL allows Canadian enforcement against spammers operating in Canada.
Note: This website provides plain language information about the law but is not a substitute for the law itself. You are strongly advised to review our information bulletins and seek your own legal advice regarding how to comply.
Tweet us
Get the facts
email or my current email list
to promote my products
and services.
- you have previously provided your products or services to them and
- they haven't told you to stop.
post promotional information
on social media.
CASL applies to emails, text and instant messages, and any similar messages sent to electronic addresses.
CASL does not apply to promotional information you post online in places like blogs or social media.
The 36-month transitional provision provides time to adjust and seek express consent from pre-existing clients.
Key Date
July 2017
1
July 1, 2017—the private right of action comes into force
Private individuals and organizations that are affect by a violation of CASL will be able to seek legal redress through civil actions.
Government Action Timeline
The sections that deal with the private right of action will come into force.
Additional measures under CASL, to better protect Canadians from viruses and malware, came into force.
CASL came into force, introducing new rules that protect Canadians from malicious spam online.
Digital Privacy Act was introduced in Parliament.
The Competition Bureau, the Office of the Privacy Commissioner of Canada and the CRTC agreed to work together to implement their mandates under CASL.
Final CASL regulations and effective date of the Act were announced.
Fightspam.gc.ca was launched—a new website dedicated to helping Canadians better understand and prevent spam.
Draft regulations were pre-published in the Canada Gazette, Part I for a 60-day comment period.
The CRTC called for comments on its proposed regulations under the Act.
Canada's anti-spam legislation (CASL) received royal assent. It was not brought into force to allow for further consultations on the new regulations that it created.
Better safe than sorry—Violating CASL has a price
Legitimate complaints about unsolicited emails may be turned over to the CRTC, which may investigate to determine if the message violates CASL.
If you are judged to be in violation, the CRTC has a range of enforcement tools available.
There are no automatic penalties for violations. The CRTC judges each case based on a series of factors, including the nature of the violation, your history with CASL, whether you benefited financially from the violation and your ability to pay a penalty.
Penalties for the most serious violations of the Act can go as high as $1 million for individuals and $10 million for businesses. Civil cases cannot be brought before the courts until July 2017.
top of page- Date modified:



