Canada's Anti-Spam Legislation (CASL)
Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23) regulates the sending of commercial electronic messages (CEMs), the installation of computer programs, and the unauthorized collection of electronic addresses. It is enforced by the Canadian Radio‑television and Telecommunications Commission (CRTC) for electronic messages, the Competition Bureau for false or misleading representations, and the Office of the Privacy Commissioner of Canada for privacy‑related aspects.
Canada's Anti-Spam Legislation (CASL) is a compliance framework from Canada with 7 domains and 22 controls that map to 5 other frameworks. The largest domains are CASL: Enforcement and Compliance (6 controls), CASL: Commercial Electronic Messages (s.6) (5 controls), CASL: Consent (s.10) (4 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (7)
CASL: Address Harvesting and Misleading Representations
CASL: Altering Transmission Data (s.7)
| Code | Title |
|---|---|
| CASL-13 | Alteration of Transmission Data |
CASL: Commercial Electronic Messages (s.6)
| Code | Title |
|---|---|
| CASL-1 | Scope and Applicability |
| CASL-10 | Messages Sent on Behalf of Others / Third-Party Senders |
| CASL-4 | Identification of Sender |
| CASL-5 | Contact Information |
| CASL-6 | Unsubscribe Mechanism |
CASL: Consent (s.10)
CASL: Enforcement and Compliance
| Code | Title |
|---|---|
| CASL-19 | Complaint Handling |
| CASL-20 | Due Diligence Defence |
| CASL-21 | Training and Awareness |
| CASL-22 | Penalties and Enforcement |
| CASL-8 | Record Keeping of Consent |
| CASL-9 | Transaction and Compliance Records |
CASL: Installation of Computer Programs (s.8)
CASL: Unsubscribe Mechanism (s.11)
| Code | Title |
|---|---|
| CASL-7 | Form and Function of Unsubscribe |
Your Compliance Coverage
If you comply with Canada's Anti-Spam Legislation (CASL), you already cover:
Australia Spam Act 2003
41%
9 controls mapped
Compare →GDPR
18%
4 controls mapped
Compare →ISO 37001:2016
9%
2 controls mapped
Compare →+ 2 more: ISO 13485:2016 (9%), ISO 37301:2021 (5%)
See all 5 mapped frameworks ↓Maps to 5 other frameworks
Coverage is not the same as your position
This page shows what Canada's Anti-Spam Legislation (CASL) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Canada's Anti-Spam Legislation (CASL) and who does it apply to?
Canada's Anti-Spam Legislation (CASL) is a compliance framework from Canada with 7 domains and 22 controls. Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23) regulates the sending of commercial electronic messages (CEMs), the installation of computer programs, and the unauthorized collection of electronic addresses. It is enforced by the Canadian Radio‑television and Telecommunications Commission (CRTC) for electronic messages, the Competition Bureau for false or misleading representations, and the Office of the Privacy Commissioner of Canada for privacy‑related aspects. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Canada's Anti-Spam Legislation (CASL) actually require?
Canada's Anti-Spam Legislation (CASL) has 22 controls organised across 7 domains. The largest domains are CASL: Enforcement and Compliance (6 controls), CASL: Commercial Electronic Messages (s.6) (5 controls), CASL: Consent (s.10) (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Canada's Anti-Spam Legislation (CASL) do I already cover?
Canada's Anti-Spam Legislation (CASL) maps to 5 other compliance frameworks. The top mapping partners are Australia Spam Act 2003 (41% coverage), GDPR (18% coverage), ISO 37001:2016 (9% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Canada's Anti-Spam Legislation (CASL)?
Start your Canada's Anti-Spam Legislation (CASL) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Canada's Anti-Spam Legislation (CASL) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 22 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.
Get Started Free →Free forever, no credit card required