CASL & Email Marketing in Canada

Email marketing remains one of the highest-ROI channels available to Canadian businesses — but in Canada, every commercial email you send is governed by the Canadian Anti-Spam Legislation (CASL). Ignore it and you're looking at fines up to $10 million per violation for businesses. Follow it and email is still one of the most powerful tools in your marketing mix.

Here's what you actually need to know.

What Is CASL?

CASL regulates any Commercial Electronic Message (CEM) — emails, SMS, or other electronic messages that encourage participation in a commercial activity. It applies to anyone sending CEMs to Canadians, regardless of where your business is located. The core rule: you must have consent before you send.

Express Consent vs. Implied Consent

CASL recognizes two types of consent, and the difference matters a lot.

Express consent means the recipient clearly and deliberately agreed to receive your messages. It does not expire — it stays valid until the person withdraws it.

Implied consent comes from an existing relationship and has a built-in expiry:

• Existing customer or contract: 2 years from the last transaction
• A direct inquiry or application to your business: 6 months from the date of inquiry

Once an implied consent window closes, you must stop sending unless you've obtained express consent in the meantime.

Does Someone Need to Check a Box to Give Consent?

No. A checkbox is not required under CASL. What the law requires is a clear, informed, affirmative action — and submitting a form can qualify.

A statement like "By submitting this form, you agree to receive email communications from [Company Name]" — displayed prominently near the submit button — is sufficient to establish express consent. The form submission itself is the affirmative action.

What CASL does prohibit is pre-checked boxes, where consent is assumed unless the person actively unchecks an option. That is not valid. But a visible, honest disclosure on a form? That works.

The key test: would a reasonable person submitting the form have clearly understood they were consenting to marketing emails? If the disclosure is buried in fine print or hidden below the fold, it won't hold up.

What Can You Do With a Lead From a Broker or Aggregator?

This is where many marketers unknowingly create legal exposure. Purchasing or receiving a lead list does not mean you have consent to email those people.

Under CASL, consent must identify the organization being consented to. A lead from a third party is contactable only if the original consent clearly named your organization, or was broad enough to cover organizations in your category — and you can prove it.

Before sending to any broker-sourced lead, you need:

• Written documentation of the original consent from the broker — the date, the form language, the context
• Confirmation the consent covers the type of message you plan to send
• Confirmation the consent has not expired or been withdrawn

If someone submitted an inquiry through an aggregator that was directed toward your business or category, you may have implied consent from that inquiry — giving you a 6-month window to make contact and pursue express consent before it closes.

Your first outreach to a broker lead should identify who you are, how you got their information, and give them a clear way to unsubscribe. Do not open with a promotional pitch.

How to Gain Consent

Lead gen and contact forms: Include a clear statement near the submit button — e.g. "By submitting this form, you agree to receive emails from [Company Name]. Unsubscribe anytime." The form submission is the consent. If you prefer a checkbox, it must start unchecked.

Gated content and lead magnets: Offering a guide or tool in exchange for an email address is effective — include a consent statement at the point of download.

In person or by phone: Verbal consent is valid but must be documented immediately — the date, the person's name, what they agreed to, and who obtained it.

Transactional emails: Order confirmations and receipts are not subject to CASL's consent rules. You can include an invitation to opt in to marketing within those messages — just keep it separate and optional.

What Every CASL-Compliant Email Must Include

• Your full legal business name
• A mailing address or working contact method
• A functional unsubscribe mechanism — must work for at least 60 days after sending
• Unsubscribe requests must be honoured within 10 business days
• Honest subject lines and sender information — no misleading headers

Dos and Don'ts

Do:

• Use clear, prominent consent language on every form — near the submit button, not in the fine print
• Document every consent: who, when, how, and what they agreed to
• Use the implied consent window to pursue express consent before it expires
• Ask brokers for written consent documentation before sending a single message
• Segment your list by consent type so you can manage expiry dates
• Honour unsubscribes within 10 business days, every time

Don't:

• Use pre-checked opt-in boxes — not valid under CASL
• Bury consent language in terms and conditions
• Assume a purchased list comes with transferable consent
• Continue sending after implied consent has expired
• Send promotional content as your first outreach to a cold or broker-sourced lead
• Share or sell your consented list — consent is not transferable

Is Email Marketing Still Worth It in Canada?

Yes — without question. CASL doesn't prohibit email marketing. It prohibits lazy email marketing.

Because compliance raises the bar, many careless senders have been filtered out. Businesses with clean, consented lists are operating in a less crowded inbox, with better deliverability and higher engagement. A subscriber who genuinely opted in is a fundamentally better prospect than someone who never asked to hear from you.

Email also gives you something paid and social channels don't: you own the list. No algorithm decides whether your message gets seen. No platform change cuts your reach overnight. Done right, it's one of the most resilient and cost-effective channels available to Canadian marketers.

Know the rules. Follow them. The channel is absolutely worth it.

This article is for informational purposes only and does not constitute legal advice. Consult a qualified Canadian legal professional for guidance specific to your organization.