← Global Privacy Laws Research Library
S.C. 2010, c. 23
Canada's Anti-Spam Legislation (CASL), S.C. 2010, c. 23
Prepared by Shubhank Suman · Last reviewed
CURRENT / IN FORCE (consolidation current to 21 September 2026)
- Legal character
- Statute
- Region
- North America
What it covers
CASL regulates commercial electronic messages (email, text and similar). Sending one requires consent (express or implied), sender identification and a working unsubscribe mechanism. It also prohibits altering transmission data and installing computer programs on another person's device without consent, and amends the CRTC Act, the Competition Act, PIPEDA and the Telecommunications Act to address false or misleading electronic messages and address harvesting.
Why it matters
It is one of the strictest anti-spam regimes in the world and applies to messages sent to or accessed from computers in Canada, with large administrative monetary penalties.
Refer to it when
Use it for email or SMS marketing to Canadians, consent and unsubscribe design, software installation consent or CRTC enforcement.
AI, privacy and cybersecurity relevance
- AI: Low
- Privacy: High
- Cyber: Moderate
AI
LOW RELEVANCE
Applies to automated messaging as commercial electronic messages.
Privacy
HIGH RELEVANCE
Canada's electronic-marketing and e-privacy rules, linked to PIPEDA.
Cybersecurity
MODERATE RELEVANCE
Controls malware-style program installation and transmission-data alteration.
Applicability
Anyone sending commercial electronic messages to, or installing programs on, computer systems in Canada.
Current validity
CURRENT / IN FORCE. Some amendments listed in the consolidation were not in force on 21 September 2026; they appear under "Amendments Not in Force". Read the official PDF on this page for the operative text.
Read first
Section 1 (definitions) → section 6 → section 10 (consent) → sections 7–8 → penalties.
Provisions / sections covered
Section 6 – Unsolicited commercial electronic messages
Consent, identification and unsubscribe requirements, with exceptions.
Section 7 – Alteration of transmission data
Prohibition without express consent.
Section 8 – Installation of computer programs
Express consent needed to install programs on another person's computer.
Section 10 – Consent
How express consent is sought and when consent is implied.
Administrative monetary penalties
CRTC enforcement and penalties for violations.
Subject-matter tags
- Consent
- Direct marketing
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- Artificial Intelligence and Data Act (AIDA), CanadaBill · HistoricalSame jurisdiction; assess applicability separately.
- Digital Charter Implementation Act, 2022: Bill C-27: CanadaBill · HistoricalSame jurisdiction; assess applicability separately.
- Operationalizing the Gen-AI Voluntary Code of Conduct for Canadian Critical Infrastructure EntitiesGuidance · Voluntary / non-bindingSame jurisdiction; assess applicability separately.
- Personal Information Protection and Electronic Documents Act: PIPEDA: CanadaLaw · CurrentSame jurisdiction; assess applicability separately.
- Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, CanadaCode of Conduct · Voluntary / non-bindingSame jurisdiction; assess applicability separately.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.