Canada’s New AntiSpam Law Will Cause Problems For Businesses

“…It will be among the world’s strictest anti-spam laws, and many businesses will need to change their e-mailing practices.

Bill C-28, as it is also known, is tougher than many other countries’ anti-spam laws in that it requires recipients explicitly to opt in to receiving e-mails and other electronic communications rather than simply requiring that they be given an opportunity to opt out…

…The law has teeth: An individual can be fined up to $1 million for violations, an organization up to $10 million.  If the sender of the message has done business with the recipient in the past two years, consent to receive commercial e-mail is implied. But since that implied consent now expires after two years, businesses that rely on it will now need a way of tracking their business dealings with people on their mailing lists and either removing their names from the list or obtaining their explicit consent to keep sending them messages before the two years are up…

…Even though recipients have agreed to receive commercial e-mail or other communications, the new law says each message must offer an easy way to unsubscribe from future mailings. It also requires that the sender’s physical address – not just electronic contact information – be included in the e-mail. And McIsaac says it’s not quite clear whether a business that uses a third party to send marketing e-mail must include that third-party’s contact information as well as its own…

…The law provides that consent is implied if the recipient of e-mail has published his or her e-mail address prominently without asking not to receive unsolicited messages. Handing someone your business card would probably qualify, Percival says. However, if challenged the onus would be on the e-mail sender to prove the recipient didn’t ask not to receive messages, McIsaac says – and even a verbal “send me an e-mail” would be hard to prove.

Businesses may want to avoid ambiguity by having trade-show visitors fill out a form requesting information rather than just collecting cards, she says.

The law has exceptions where the sender and recipient have a family or personal relationship. Personal relationships could include non-business contact like playing golf together or belonging to the same service club, if they involve reqular contact within the last two years.

Businesses should be reviewing procedures and training staff on the new requirements, and McIsaac suggests they talk to their insurers about coverage for possible inadvertent violations.


Questions or Comments?