The presentation is about preparing for the upcoming Canadian Anti-Spam Legislation. Learn what CASL is, the timing of it’s implementation and how it will apply to commercial email. We will review specific case studies to better define consent requirements and exceptions to those requirements.
Electronic Messages include
An email account
A telephone message or text
An instant messaging account
Any similar account
Has to be commercial – broader than CAN SPAM, no primary purpose
Electronic Messages include
An email account
A telephone account; text messages (voice messages are excluded)
An instant messaging account
Any similar account
Non-exhaustive list
Sent to or from a computer system located in Canada.
Exclusion for messages sent from Canada to another country with belief it will comply with another countries anti-spam legislation. Ex. The US.
Enforcement is done by Industry Canada and the CRTC.
Broad investigative powers
Administrative monetary penalties.
Up to $10 Million per violation
Competition Bureau (CB)
Amends the Competition Act to include violations respecting:
• Misleading and deceptive practices/ representations, including false headers, subject lines, etc...
Consent must be auditable. You must be able to prove where your leads gave consent when called upon.
Requires an action by the recipient.
No check boxes.
Never expires but can be revoked through an unsubscribe action.
Clearly and conspicuously state purpose for obtaining consent.
Clearly identify who is being given consent. If you are getting consent for a business partner you must state that business partner’s name .
Provide contact information on behalf of who is getting consent.
Inform individual that they can unsubscribe
Image posted on CRTC website.
Don’t NEED a check box. Check boxes are relevant where you may already have their email address.
Existing Business Relationship
‒ Recipient purchased, leased or engaged in bartering of virtually anything from the sender within the past 2 years
‒ Recipient accepted a business, investment or gaming opportunity offered by the sender within the past 2 years
‒ Recipient and the sender entered into a written contract in respect of any of the above and the contract is either currently in existence or expired within the past 2 years
Existing Non-Business Relationship
‒ The sender is a club, association or voluntary organization and the recipient is or was a member in the past two years
Less relevant for business senders
A conspicuously published address.
Website
Directory
Provided to the sender
Has to be relevant to the person in their professional business capacity – relevant in a B2B
May be looser than Terms of Service of some service providers.
May not want to continue sending to inactives – even if it is still OK under the law
A business has six months where there is permission to send commercial email after an inquiry, which is converted to a two-year period of implied consent if the sender closes business with that recipient.
• Data management will be key to compliance.
Review existing data and groups consents:
• Explicit *
• Implied
Inquiry
• Third party
• Unknown
• None
• Identify gaps in your database fields or the information you are tracking:
• Consent date
• Consent level
• Consent source
o Website
o IP address
• Last implied date
• Last contact date
Use this as a Marketing Opportunity! Show that you respect your recipients.
a pre-checked box would be considered "opt-out"
Maintain image of the form that was filled out. Online or offline.
a pre-checked box would be considered "opt-out"
Onerous requirements.
CRTC backed off and these are “suggestions”
Date, time, method, agent on the phone – whatever records you can maintain.
Where an existing business relationship or non-business relationship exists as of July 1, 2014, regardless of when the relationship began, implied consent is automatically refreshed until July 1, 2017
To rely on the provision, there must have been prior communication of CEMs between sender and recipient
List Rental situations
Must be relevant to original business where consent was given.
CASL only applies to Commercial Electronic Messages
CASL does not apply to messages that are sent:
1. Within or between business, where there’s an ongoing relationship;
2. In response to a request;
3. To enforce a legal right or obligation;
4. Via closed messaging systems;
a) Proprietary system
b) Messaging systems where ID and unsubscribe included on
platform
5. To a foreign jurisdiction in compliance with their spam law; (see Schedule 1 in the ECPR)
6. By registered charities raising funds
7. By political candidates or organizations, soliciting political contributions
Personal email – ma protect the Forward to a Friend functions.
CEMs – Because the email contains some commercial purpose.
Internal Communications within an Organization
‒ One member of an organization sends a CEM to another member of the organization
‒ The CEM concerns the activities of the organization
‒ Member includes:
Employee
Representative
Consultant
franchisee
‒ Key issue: how directly must the CEM “concern the activities” of the organization?
Organization-to-Organization Communications
‒ A member of an organization sends a CEM to a member of another organization
‒ The two organizations have “a relationship”
‒ CEM concerns the activities of the receiving organization
‒ The term “relationship” is undefined – but clearly must be something other than the other types of “relationships” already defined in CASL
‒ Key issues:
what kind of relationship must exist between the organizations?
how directly must the CEM “concern the activities” of the other organization?
Inquiry, Application, Solicited Communications
CEM sent to a person engaged in a commercial activity and consists solely of an inquiry or application related to that activity
CEMs – Because the email contains some commercial purpose.
Internal Communications within an Organization
‒ One member of an organization sends a CEM to another member of the organization
‒ The CEM concerns the activities of the organization
‒ Member includes:
Employee
Representative
Consultant
franchisee
‒ Key issue: how directly must the CEM “concern the activities” of the organization?
Organization-to-Organization Communications
‒ A member of an organization sends a CEM to a member of another organization
‒ The two organizations have “a relationship”
‒ CEM concerns the activities of the receiving organization
‒ The term “relationship” is undefined – but clearly must be something other than the other types of “relationships” already defined in CASL
‒ Key issues:
what kind of relationship must exist between the organizations?
how directly must the CEM “concern the activities” of the other organization?
Inquiry, Application, Solicited Communications
CEM sent to a person engaged in a commercial activity and consists solely of an inquiry or application related to that activity
Yes, they are CEMs – Because the email contains some commercial purpose.
Inquiry, Application, Solicited Communications
CEM sent to a person engaged in a commercial activity and consists solely of an inquiry or application related to that activity
Internal Communications within an Organization
‒ One member of an organization sends a CEM to another member of the organization
‒ The CEM concerns the activities of the organization
‒ Member includes:
Employee
Representative
Consultant
franchisee
‒ Key issue: how directly must the CEM “concern the activities” of the organization?
Organization-to-Organization Communications
‒ A member of an organization sends a CEM to a member of another organization
‒ The two organizations have “a relationship”
‒ CEM concerns the activities of the receiving organization
‒ The term “relationship” is undefined – but clearly must be something other than the other types of “relationships” already defined in CASL
‒ Key issues:
what kind of relationship must exist between the organizations?
how directly must the CEM “concern the activities” of the other organization?
Conspicuous Publication of Electronic Address
‒ Recipient has conspicuously published the electronic address to
which the CEM is sent
‒ Publication not accompanied by a statement that the recipient does not wish to receive unsolicited CEMs at the electronic address
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ The term “conspicuously published” is not defined
‒ Similar exemption in Australian and New Zealand anti-spam laws
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Disclosure of Electronic Address
‒ Recipient has disclosed to the sender the electronic address to which the CEM is sent
‒ Recipient has not indicated his or her wish not to receive unsolicited CEMs
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ One of the widest (and least talked about) exemptions
‒ Potentially broader than existing relationship exemptions
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Consent Received by Another
‒ A person can seek consent to send CEMs on behalf of one or more
other parties
‒ CEM sent on basis of such consent must:
Comply with ordinary formality requirements
Identify the person who obtained the consent
Include an unsubscribe mechanism that allows the recipient to withdraw consent from the following parties:
the person who obtained the express consent
any other person who is authorized to use the express consent
‒ Withdrawal of consent must be communicated to affected parties
Existing Business Relationship
‒ Recipient purchased, leased or engaged in bartering of virtually anything from the sender within the past 2 years
‒ Recipient accepted a business, investment or gaming opportunity offered by the sender within the past 2 years
‒ Recipient inquired or applied for anything mentioned above from the sender within the past 6 months
‒ Recipient and the sender entered into a written contract in respect of any of the above and the contract is either currently in existence or expired within the past 2 years
Information about Ongoing Use or Relationship
CEM solely provides “notification of factual information” about:
the ongoing use or purchase by the recipient of a product, goods or a service offered under a subscription, membership, account, loan or similar relationship by the sender; or
the ongoing subscription, membership, account, loan or similar relationship of the recipient
Commercial Transaction in Progress
‒ CEM solely facilitates, completes or confirms a commercial transaction that recipient agreed to enter into with the sender
‒ Necessary if you have no existing business or non-business relationship within the relevant time period requirements to allow consent to be implied
Conspicuous Publication of Electronic Address
‒ Recipient has conspicuously published the electronic address to
which the CEM is sent
‒ Publication not accompanied by a statement that the recipient does not wish to receive unsolicited CEMs at the electronic address
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ The term “conspicuously published” is not defined
‒ Similar exemption in Australian and New Zealand anti-spam laws
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Disclosure of Electronic Address
‒ Recipient has disclosed to the sender the electronic address to which the CEM is sent
‒ Recipient has not indicated his or her wish not to receive unsolicited CEMs
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ One of the widest (and least talked about) exemptions
‒ Potentially broader than existing relationship exemptions
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Consent Received by Another
‒ A person can seek consent to send CEMs on behalf of one or more
other parties
‒ CEM sent on basis of such consent must:
Comply with ordinary formality requirements
Identify the person who obtained the consent
Include an unsubscribe mechanism that allows the recipient to withdraw consent from the following parties:
the person who obtained the express consent
any other person who is authorized to use the express consent
‒ Withdrawal of consent must be communicated to affected parties
Existing Business Relationship
‒ Recipient purchased, leased or engaged in bartering of virtually anything from the sender within the past 2 years
‒ Recipient accepted a business, investment or gaming opportunity offered by the sender within the past 2 years
‒ Recipient inquired or applied for anything mentioned above from the sender within the past 6 months
‒ Recipient and the sender entered into a written contract in respect of any of the above and the contract is either currently in existence or expired within the past 2 years
Information about Ongoing Use or Relationship
CEM solely provides “notification of factual information” about:
the ongoing use or purchase by the recipient of a product, goods or a service offered under a subscription, membership, account, loan or similar relationship by the sender; or
the ongoing subscription, membership, account, loan or similar relationship of the recipient
Commercial Transaction in Progress
‒ CEM solely facilitates, completes or confirms a commercial transaction that recipient agreed to enter into with the sender
‒ Necessary if you have no existing business or non-business relationship within the relevant time period requirements to allow consent to be implied
Conspicuous Publication of Electronic Address
‒ Recipient has conspicuously published the electronic address to which the CEM is sent
‒ Publication not accompanied by a statement that the recipient does not wish to receive unsolicited CEMs at the electronic address
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ The term “conspicuously published” is not defined
‒ Similar exemption in Australian and New Zealand anti-spam laws
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Disclosure of Electronic Address
‒ Recipient has disclosed to the sender the electronic address to which the CEM is sent
‒ Recipient has not indicated his or her wish not to receive unsolicited CEMs
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ One of the widest (and least talked about) exemptions
‒ Potentially broader than existing relationship exemptions
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Existing Business Relationship
‒ Recipient purchased, leased or engaged in bartering of virtually anything from the sender within the past 2 years
‒ Recipient accepted a business, investment or gaming opportunity offered by the sender within the past 2 years
‒ Recipient inquired or applied for anything mentioned above from the sender within the past 6 months
‒ Recipient and the sender entered into a written contract in respect of any of the above and the contract is either currently in existence or expired within the past 2 years
Information about Ongoing Use or Relationship
CEM solely provides “notification of factual information” about:
the ongoing use or purchase by the recipient of a product, goods or a service offered under a subscription, membership, account, loan or similar relationship by the sender; or
the ongoing subscription, membership, account, loan or similar relationship of the recipient
Commercial Transaction in Progress
‒ CEM solely facilitates, completes or confirms a commercial transaction that recipient agreed to enter into with the sender
‒ Necessary if you have no existing business or non-business relationship within the relevant time period requirements to allow consent to be implied
Conspicuous Publication of Electronic Address
‒ Recipient has conspicuously published the electronic address to which the CEM is sent
‒ Publication not accompanied by a statement that the recipient does not wish to receive unsolicited CEMs at the electronic address
‒ CEM is relevant to the recipient’s business, role, functions or duties in a business or official capacity
‒ The term “conspicuously published” is not defined
‒ Similar exemption in Australian and New Zealand anti-spam laws
‒ Key issue: determining when a CEM is “relevant to” the recipient’s role in a business or official capacity
Recipients are covered by Spain’s DPA
Additional related exemptions:
‒ Third-party referral
CEM must include the full name of the individual who made the referral
“CASL puts a legal framework around engagement, and defines what have been best practices for years.”
Common sense approach
Knowingly, Intentionally, Repeatedly violate rules