Your rights under CASL when you keep getting spam emails even though you unsubscribed, and how to report repeat violations to the Spam Reporting Centre.
This page provides legal information, not legal advice. Consult a qualified privacy lawyer or CIPP/C-accredited privacy professional before taking action on access requests, breach response, complaints to a Privacy Commissioner, or Federal Court applications.
Last verified: September 2026
TL;DR
CASL requires senders to process unsubscribe requests within 10 business days. Continued messaging after unsubscribing is a violation. Report spam to the Spam Reporting Centre at fightspam.gc.ca, which feeds investigations by the CRTC.
What CASL requires
The sender must provide a working unsubscribe mechanism for at least 60 days after the message is sent, and process unsubscribe requests within 10 business days.
Report repeat violations
File a report at fightspam.gc.ca (Spam Reporting Centre).
Include the full message headers and any prior unsubscribe confirmations.
The CRTC can impose penalties up to $1 million per individual and $10 million per organization.
If the sender is outside Canada
CASL also applies when a Canadian is the intended recipient. The CRTC may still investigate and has worked with foreign counterparts on cross-border enforcement.