What is CASL (Canadian Anti-Spam Legislation)?

CASL (Canadian Anti-Spam Legislation) is Canada's federal anti-spam law that came into force in 2014. It is widely regarded as one of the strictest anti-spam laws among major economies because it generally requires consent before you can send a commercial electronic message to a Canadian recipient. For B2B sales teams running outbound campaigns that include Canadian prospects, understanding CASL is essential to avoid significant legal penalties.

CASL operates on a consent-based model with two tiers: express consent and implied consent. Express consent means the recipient has explicitly agreed to receive commercial emails from you, typically through a signup form, a checkbox during registration, or a written agreement. Implied consent exists in several narrowly defined circumstances, most importantly when you have an existing business relationship with the recipient. If someone has purchased from you, entered into a contract, or made an inquiry within a defined time period, you have implied consent to email them.

The time limitations on implied consent are critical to understand. Implied consent based on a purchase or contract lasts for two years after the last transaction. Implied consent based on an inquiry lasts for six months. After these windows expire, you need express consent to continue emailing the recipient. This expiration mechanism is one of the features that makes CASL stricter than CAN-SPAM, which has no consent requirement at all.

For cold email outreach specifically, CASL creates significant restrictions. Unlike CAN-SPAM, where you can email anyone as long as you include an unsubscribe link and physical address, CASL generally requires some form of consent before the first email. However, there is a narrow exception for messages sent to publicly available business email addresses where the message is relevant to the recipient's business role. This exception is often cited by B2B sales teams, but relying on it requires careful documentation.

Every commercial email sent under CASL must include the sender's name and business name, the sender's mailing address and either a phone number, email address, or web address, and a clear and prominently placed unsubscribe mechanism. The unsubscribe process must be simple and must be processed within 10 business days.

Penalties under CASL are severe. The Canadian Radio-television and Telecommunications Commission (CRTC) can impose administrative monetary penalties of up to 10 million Canadian dollars per violation for businesses and up to 1 million dollars for individuals. Private individuals can also bring civil lawsuits seeking damages of up to 200 dollars per violation, with a maximum of 1 million dollars per day.

Practical compliance for outbound teams includes maintaining detailed consent records for every contact, tracking implied consent expiration dates, ensuring all emails include required identification and unsubscribe mechanisms, and immediately honoring opt-out requests. If a significant portion of your prospect list includes Canadian recipients, investing in compliance infrastructure is not optional — it is a business-critical requirement.