Sending a marketing email in Canada is not a free-for-all. Canada's Anti-Spam Legislation, universally called CASL, governs the commercial messages you send, and it has real teeth: penalties can reach into the millions. The good news is that CASL is not out to punish normal, honest businesses. If you email people who want to hear from you, identify yourself, and make it easy to opt out, you are most of the way there. Here is what a small business actually needs to know. This is orientation, not legal advice.
What CASL covers
CASL applies to commercial electronic messages, which mostly means the marketing and promotional email (and texts) you send to customers and prospects. It rests on three simple requirements: you need consent to send the message, the message has to clearly say who you are and how to reach you, and it has to include a working way to unsubscribe. Miss any of those and a routine newsletter can become a compliance problem.
Consent: express versus implied
Like the broader rules on consent, CASL recognizes two kinds. Express consent is someone actively opting in, ticking a box on purpose, and it does not expire until they withdraw it. Implied consent is more limited and time-bound: for example, an existing customer who bought from you generally gives implied consent for a couple of years after the purchase. The safest path for a small business is to build an express-consent list, people who genuinely asked to hear from you, rather than relying on the edges of implied consent or, worse, buying a list.
What every message needs
- Clear identification. Say who is sending it, with a real business name and a way to contact you (a mailing address and an email or phone).
- A working unsubscribe. One that is easy to find and use, and that you honour promptly, within 10 business days under CASL, without making people jump through hoops.
- Honest framing. No misleading sender names or subject lines. The message should be what it says it is.
Why it is worth getting right
CASL penalties can reach up to 10 million dollars per violation for a business, and while a small operation is unlikely to be the regulator's first target, complaints do trigger action, and the reputational hit of being seen as a spammer is its own cost. The practical habits are not onerous: keep an opt-in list, keep records of who consented and when, honour unsubscribes quickly, and keep marketing separate from your core business email so a compliance issue never threatens your day-to-day mail. Do that and CASL becomes a non-event. It also pairs naturally with your email deliverability, since the same clean-list habits keep you out of the spam folder.