New Anti-Spam Law: Better Act Quickly

In December 2010, the federal Parliament passed the Act to Promote the Efficiency and Adaptability of the Canadian Economy by Regulating Certain Activities¹ that Discourage Reliance on Electronic Means of Carrying out Commercial Activities, better known as the “Canada’s Anti Spam Legislation” (CASL or the “Act”). The purpose of the Act is mainly to protect Canadian consumers and businesses against unsolicited spam messages, false or misleading commercial representations, malicious software and other electronic threats. It is scheduled to come into force on July 1, 2014.

The new regime is based on a opt-in mechanism rather than through exclusion. As such, after July 1^st, sending a commercial electronic message will be prohibited unless the recipient has consented to receiving it. Canadian businesses using electronic mail or social networks to inform and solicit customers will therefore have to review their practices in order to comply with the law, failing which they will be liable to administrative penalties and civil suits. However, transition measures are provided to give businesses time to adjust their practices.

The definition of “commercial electronic message” within the meaning of the Act is wide and covers all electronic messages, including text messages (commonly called SMS), sound, vocal or visual messages in respect of which it is reasonable to conclude that their purpose is to encourage participation in a commercial activity. For instance, an electronic message which promotes an offer to purchase, sell or rent a product or a service constitutes a commercial electronic message covered under the Act. Such is also the case for an electronic message promoting a person as a purchaser, seller or renter of a product or service or involved in the areas of business, investment or gaming.

Since non commercial activities are not covered under the Act, it must be noted that political parties, charitable organizations and corporations conducting market studies or surveys are generally not covered under the Act, unless their electronic messages are related to the sale or promotion of a product.

Furthermore, the Act provides for many exceptions, such as messages sent between persons having a personal or family relationship or commercial electronic messages responding to a recipient who requested information on prices or estimates for the provision or delivery of goods, products or services.

For the time being, the prohibition does not cover verbal communications by phone, which are currently governed by the Telecommunications Act², particularly through the National Do Not Call List. However, this exception may be revoked by order-in-council if the government deems it appropriate.

EXPRESS OR IMPLIED CONSENT OF THE RECIPIENT
The required consent for sending a commercial electronic message may be express or implied. The situations where the sender of such a message may rely on the implied consent of the recipient are set out in the Act. For instance, the Act provides that there is implied consent where the sender and the recipient have or had an ongoing business relationship within the two years preceding the date the message is sent. The same applies where the recipient asked the sender about products, goods or services during a 6-month period preceding the date of the message.

The consent of the recipient is also implied if he or she has conspicuously published his or her electronic address without adding a statement whereby the recipient does not wish to receive unsolicited commercial electronic messages, to the extent that the message is relevant to the recipient’s employment or business or functions in such business.

The consent is also implied where the recipient communicated his or her electronic address to the sender without indicating that he or she does not wish to receive unsolicited commercial electronic messages, again to the extent that the message is relevant to the recipient’s employment or business or functions in such business.

Lastly, the existence of private relationships between the sender and the recipient within the two-year period immediately before the day on which the message is sent also allows for inferring the implied consent of the recipient to a commercial electronic message being sent in the cases provided in the Act.

In all other cases where the Act does allow for inferring an implied consent, the express consent of the recipient is required for sending a commercial electronic message. Such consent is not presumed and the burden of proof lies with the sender.

To obtain this consent, the sender must set out clearly and simply the purposes for which the consent is being sought and also the information that identifies the person seeking consent (or if the person is seeking consent on behalf of another person, information that identifies that other person). The scope of information which is required to be provided to identify the person seeking consent is set out in the regulations.

It is important to note that after July 1^st, a request for consent will in itself constitute a commercial electronic message. It will therefore not be possible to request such consent using an electronic mean, subject to certain exceptions.

MECHANISM FOR WITHDRAWING CONSENT AND FORM OF COMMERCIAL ELECTRONIC MESSAGES
The Act provides that any person sending a commercial electronic message to another person must implement an unsubscribe mechanism allowing the recipient to withdraw his or her consent to receive commercial electronic messages from that sender. The sender must allow the recipient to express his or her will by electronic means, either by electronic mail or through a website, without cost and at any time. The sender must give effect to any withdrawal within a 10-day period.

The description of this withdrawal mechanism must appear in the commercial electronic message which must, in addition, include information that identifies the person who sends the message or, if the message is sent on behalf of another person, the information that identifies the person who sends the message and the person on whose behalf it is sent. The commercial electronic message must also indicate the postal address and either the phone number to reach a service agent or a voicemail service, or the electronic mail address or the address of the website of the person who sends the message or, if applicable, the address of the website of the person on whose behalf it is sent.

If it is practically impossible to include this information and the withdrawal mechanism in the commercial electronic message, they may be posted on an easily accessible web page without charge to the recipient through a link indicated clearly and prominently in the message.

ADMINISTRATIVE PENALTIES AND PRIVATE RIGHT OF ACTION
The Act provides for severe penalties for persons who fail to comply with its provisions. Contraveners are liable to administrative monetary penalties of up to $1,000,000 in the case of an individual, and $10,000,000 in the case of any other person.

Furthermore, the existence of a private right of action against the sender of an unsolicited commercial electronic message constitutes a crucial point of this new regime. The Act allows any person suffering a loss or harm as a result of non-compliance with the provisions of the Act by the sender of a commercial electronic message to apply to a court of competent jurisdiction for a judgment ordering the sender to pay him or her the amount of such damages, plus liquidated damages of up to $1,000,000. For instance, the recipients of a spam message who suffer damages after relying on misleading information found therein may institute a class action to pursue their common claims on the basis of this new Act.

CONCLUSION
Unsolicited electronic messages are a nuisance which warrant action. Canada is the only G8 jurisdiction which had not yet taken specific measures to regulate or prohibit spam messages. However, the obligation to obtain the consent of the recipients of commercial electronic messages, who in most cases have nothing to do with the spam messages, will constitute a difficult and costly burden for many businesses.

It is therefore important that businesses review their electronic mailing lists to ensure that they comply with the provisions of the Act, namely, that the persons whose names are included have given their express consent to receive commercial electronic messages from the businesses or that the businesses can rely on the implied consent of such persons, failing which the businesses will have to obtain adequate consents. Again, contravening businesses will be liable to substantial penalties and claims which may exponentially increase through class actions involving hundreds if not thousands of recipients who allege that they suffered damages.
_________________________________________
¹ S.C. 2010, c. 23.
² S.C. 1993, c. 38.