About the Canada Anti-Spam Law (CASL)

The Canadian Anti-Spam Law (CASL) went into effect July 1, 2014. If you're in Canada or send to Canadian residents, you need to comply with CASL.

Be sure to review the Mailchimp Terms of Use also, as they are sometimes more stringent than what's outlined in CASL.

This article is provided as a resource, but does not constitute legal advice. If you have more questions about CASL, we encourage you to contact an attorney in your area who is familiar with this issue.


There are new consequences for spammers, including fines of $1-10M per violation. It's important to note that individuals and companies, including directors, officers and other agents, are responsible and liable for the messages they send.

During the transitional period, the Canadian Radio-Television and Telecommunications Commission (CRTC), the Competition Bureau, and the Office of the Privacy Commissioner of Canada, may investigate and litigate against entities who don't adhere to CASL. After July 1, 2017, any individual will also be able to sue any entity they believe is sending spam messages.

What's covered under CASL

CASL regulations apply to any "Commercial Electronic Message" (CEM) sent from or to Canadian computers and devices in Canada. Messages routed through Canadian computer systems are not subject to this law.

A CEM is any message that:

  • is in an electronic format, including emails, instant messages, text messages, and some social media communications;
  • is sent to an electronic address, including email addresses, instant message accounts, phone accounts, and social media accounts; and
  • contains a message encouraging recipients to take part in some type of commercial activity, including the promotion of products, services, people/personas, companies, or organizations.

Fax messages and fax numbers aren't considered electronic formats or addresses under CASL.

Exempt messages

These types of electronic messages are exempt from CASL for various reasons. Please note that not all of these are allowable under Mailchimp's Terms of Use.

  • Messages to family or a person with established personal relationship.
  • Messages to an employee, consultant, or person associated with your business.
  • Responses to a current customer, or someone who has inquired in the last six months.
  • Messages that will be opened or accessed in a foreign country, including the U.S., China, and most of Europe.
  • Messages sent on behalf of a charity or political organization for the purposes of raising funds or soliciting contributions.
  • Messages attempting to enforce a legal right or court order.
  • Messages that provide warranty, recall, safety, or security information about a product or service purchased by the recipient.
  • Messages that provide information about a purchase, subscription, membership, account, loan, or other ongoing relationship, including delivery of product updates or upgrades.
  • A single message to a recipient without an existing relationship on the basis of a referral. The full name of the referring person must be disclosed in the message. The referrer may be family or have another relationship with the person to whom you're sending.

If your message does not meet one of these criteria, consent is required under CASL.

Mailchimp Terms of Use

In many cases, Mailchimp's Terms of Use are more strict than what's outlined in CASL, particularly regarding third-parties and implied consent. As a rule of thumb, you want to have written permission from every subscriber.

Sticking to Mailchimp's policies is not only required, it also helps improve your campaign deliverability and subscriber engagement. Here are some of Mailchimp's Terms that differ from CASL.

  • Customers must have made a purchase within the last 12 months. Inquiries without a purchase don't count as permission.
  • Family members and friends still need to provide written permission.
  • Nonprofit organizations, political groups, and courts still need to secure written permission from recipients.
  • Referrals and published email addresses are considered third-party, and therefore, not allowed.
  • Oral agreement to receive messages does not qualify as permission.

Additional Requirements

In addition to understanding what qualifies as CASL-regulated message, and what type of consent is needed, there are a few other details to keep in mind.

  • You must retain a record of consent confirmations.
  • When requesting consent, checkboxes cannot be pre-filled to suggest consent. Each subscriber must check the box themselves for consent to be valid.
  • All messages sent must include your name, the person on whose behalf you are sending (if any), your physical mailing address and your telephone number, email address, or website URL.
  • All messages sent after consent must also include an unsubscribe mechanism, and unsubscribes must be processed within 10 days.

Here's the full text of the law, if you're into that sort of thing. The Canadian Radio-Television and Telecommunications Commission's also set up an FAQ page and some guidelines for obtaining consent. If you have additional questions, we encourage you to contact an attorney in your area who is familiar with the law.

Was this article helpful?

Anything else we can do to improve our site?