What CASL requires
A commercial electronic message (email, SMS, social DM) must:
- Have your consent (express or implied).
- Clearly identify the sender and their contact information.
- Include a working, free, easy-to-use unsubscribe mechanism that works for at least 60 days.
- Process unsubscribe requests within 10 business days.
Express vs. implied consent
Express consent is specific and opt-in. It must be documented.
Implied consent applies in limited circumstances, such as existing business relationships (purchase in past 2 years) or inquiries (past 6 months).
How to report CASL violations
Report spam to the Spam Reporting Centre at fightspam.gc.ca. The CRTC investigates and can impose administrative penalties. A private right of action under CASL has been proposed but is not yet in force.