What CASL requires
A commercial electronic message (email, SMS, social DM) must:
- Have your consent (express or implied).
- Clearly identify the sender and their contact information.
- Include a working, free, easy-to-use unsubscribe mechanism that works for at least 60 days.
- Process unsubscribe requests within 10 business days.
Express vs. implied consent
Express consent is specific and opt-in. It must be documented.
Implied consent applies in limited circumstances, such as existing business relationships (purchase in past 2 years) or inquiries (past 6 months).
Reporting CASL violations
Spam is reported to the Spam Reporting Centre (fightspam-combattrelepourriel.ised-isde.canada.ca or spam@fightspam.gc.ca). The CRTC investigates and can impose administrative penalties. CASL's private right of action was never brought into force and was repealed on December 31, 2025.